Duplicate client entries in the Symantec Endpoint Protection Manager console

Article:TECH138350  |  Created: 2010-08-24  |  Updated: 2012-08-31  |  Article URL http://www.symantec.com/docs/TECH138350
Article Type
Technical Solution


Issue



Client groups that are synced to an Active Directory OU are showing duplicate client entries in the Symantec Endpoint Protection Manager (SEPM) console.  Only one of the entries is showing connected with a green dot.


Cause



The two entries in the SEPM console show different HardwareIDs.  


Solution



Force the SEP client computer to generate a new HardwareID by clearing the HardwareID registry entry and removing the sephwid.xml file if it is present.

  1. Stop SMC on the affected client computer by clicking Start > Run, type smc -stop then click OK.
  2. On the affected computer, navigate to registry location:
    HKLM\Software\Symantec\Symantec Endpoint Protection\SMC\Sylink\Sylink
  3. Clear the value for "HardwareID." (making it blank).
  4. Navigate to the following directory location:
    C:\Program Files\Common Files\Symantec Shared\HWID
  5. Rename the file "sephwid.xml" to "sephwid.xml.bak".
  6. Start SMC by clicking Start > Run, type smc -start then click OK.

This should cause the client machine to become associated with the correct AD-synced entry in the SEPM.

 

Note that the latest releases of SEP 12.1 offer enhanced capabilities for client registration.  Upgrading to the latest release of SEP 12.1 can minimize the potential for duplicate clients in the SEPM.





Article URL http://www.symantec.com/docs/TECH138350


Terms of use for this information are found in Legal Notices