Endpoint Protection

Hi Guys,

We are enountering some issues.

Some of the clients listed in the SEPM,  when we right click it and shose Properties, under Clients tab, it shows 2SEP clients. 

Please advise what can we do to solve this. Thank you!

Screenshot is attached.

Kat

Hi,

Are you using image OS ?

can you delete the client from console and observes if it reflects back with 2 icons?

Hi Ashish

Yes we are using image OS.

Does this affect?

Hi Pete,

Will try that one.

When ca we expect a result if we did that? After a heartbeat?

HI,

Duplicate entry are avaiable in SEPM

https://www-secure.symantec.com/connect/forums/how-come-i-got-duplicated-sep-client-my-sepm-database

SEP 11

This would not clear history of the present clients which are reporting to SEPM.

 Remove duplicated SEP client on SEPM console

Configure SEPM to remove clients which have not connected within a specific number of days.

1. Open SEPM and select the Admin panel.
2. Click on Servers
3. Right click on the Site where your management servers are located and choose Edit Properties
4. Check "Delete Clients that have not connected for __ Days"
5. Enter a value for Days.
6. Click OK.

SEP 12

Duplicate SEP clients appear in the Symantec Endpoint Protection Manager console

https://www-secure.symantec.com/connect/articles/duplicate-sep-clients-appear-symantec-endpoint-protection-manager-console

Check this thread

https://www-secure.symantec.com/connect/forums/2-sep-clients-listing-client-tab-client-properties

Hi KAT,

One important note: the version of SEP you are using dates from September 2009 - three years old!  There are thousands of fixes and improvements that have gone int SEP since then.  I recommend upgrading SEPMs and clients to the latest release of SEP 11 (SEP 1 RU7 MP2) or to SEP 12.1.

These articles may also help, if they match your symptoms:

Removing duplicate clients from the Symantec Endpoint Protection Manager using the CleanClients tool
Article:TECH97371   |  Created: 2009-01-11   |  Updated: 2012-03-30   |  Article URL http://www.symantec.com/docs/TECH97371 
 

How to obtain a listing of Clients machines imaged with Symantec Endpoint Protection (SEP) 11.0.5 and later with duplicate hardware ID's
Article:TECH157434   |  Created: 2011-04-05   |  Updated: 2012-05-24   | 
Article URL http://www.symantec.com/docs/TECH157434 
 

Hope this helps!  Please do keep your thraed up to date with the latest progress and developments.

You should first verify if they are duplicates of the same PC by comparing the hardware IDs and that only one is reporting. As in the case of a reimaging.

Your expectations here is that the one that was deleted will only return if the same image is used again on a PC having the same computer name. Make sure you remove the client that has the oldest 'last checked in' date.

You should also find some useful cleanup tools in your SEPM installer - CleanClients. But what I do here is check for duplicate hardware IDs. And as I recall, it removes all the hardware IDs from the server and only those connecting will communicate with the info.

https://www-secure.symantec.com/connect/forums/how-delete-duplicate-entries-sepm

Check my One of download Image Installation System Problem

https://www-secure.symantec.com/connect/downloads/image-installation-system-problem

As Mick said, I would highly recommend upgrading to the latest version.

Upgrading is definitely worth the time spent.

hi kat,

Any update on this ?