Endpoint Protection

I have found that almost 50 system weekly disconnect from SEPM. When i remove and refresh the HWID file from system and registry then it will be recommunicate with SEPM. So anyone have idea to properly resolve such issue.

are these system imaged with sep client already installed? if yes, has the hardware deleted from the image?

The way SEP has been deployed on these machines may be incorrect, and you may have all clients using the same HardwareKey. There is an article available for that:

SEP 11.0 => http://www.symantec.com/docs/TECH102815
SEP 12.1 => http://www.symantec.com/docs/TECH163349

I am not understanding your point which  hardware deleted from the image?

If you are using the Image CD for window installation then pls read the below document

https://www-secure.symantec.com/connect/downloads/image-installation-system-problem

This link will help to replace the HWID file easily in single click

https://www-secure.symantec.com/connect/downloads/remotely-run-symantec-antivirus-related-batch-file

After that required to restart the client system.

It's working finely. So try this one.

For the future

if you are using the image disk for the OS deployment. Try to create the disk with Sep service stop

Also remove the below files

Hkey_local_machine\Software\Symantec\Symantec Endpoint Protection\SMC\SYLINK\Sylink\(HardwareID)

C:\Program Files\Common Files\Symantec Shared\HWID (sephwid.xml)

This link help you to create the OS IMAGE Disk

http://www.symantec.com/business/support/index?page=content&id=TECH102815

Hi,

Are you installed the image on windows...

If this case done then pls mark the answer comment as a solution. So it help to other..

Are these imaged sytems

Regards

If it image disk then pls find the attach link

http://www.symantec.com/business/support/index?page=content&id=TECH102815