How to move SEP clients from an imported Active Directory (AD) SEPM group to a group created manually

Article:TECH142225  |  Created: 2010-10-20  |  Updated: 2012-06-01  |  Article URL
Article Type
Technical Solution




Unable to move a Symantec Endpoint Protection (SEP) client from an imported Active Directory (AD) Symantec Endpoint Protection Manager (SEPM) group to a manually created group.  The "Move" option can not be used.



Symantec Endpoint Protection 11.x and 12.1

Windows Server


1.       Login to SEPM console.

2.       Click the "Clients" icon on the left column.

3.       Select a group which is imported from AD. 

4.       Select the SEP client machines to be moved to the groups created manually.

5.       Right-click and select "Copy". This action will copy the UID of these clients selected to the manually created groups. When these selected clients login, they will automatically register to the new groups.  In the AD imported groups (folders with orange mark) these clients will show up as offline, and in the SEPM Machine Groups (folders with a blue mark) they will appear as Online.

This process can cause SEP clients to use multiple licenses in SEP 12.1.  This can trigger the error:  'You have deployed more clients than the number of licenses purchased.'

Article URL

Terms of use for this information are found in Legal Notices