Endpoint Protection

Dear all,

I have some problem in sep 11, there are some unmanage client detected in sep console, but the unmanaged client is connected to the management server. I've done sylink order to manage sep client  success but client still unmanage on sep console.

anyone help me solve this problem

I have included a screen capture

Try to delete hardware ID and follow this steps

Copy "C:\Unmanaged_to_Managed\syslink.xml" "C:\Program Files\Symantec\Symantec Endpoint Protection"

*****Script for Delete Sephwid.xml file for common folder*****

cd\

cd C:\Program Files\Common Files\Symantec Shared\HWID

del sephwid.xml

Cd\

*****Delete hardwareID for registry*****

reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\SMC\SYLINK\SyLink" /v HardwareID /f

https://www-secure.symantec.com/connect/downloads/script-convert-unmanaged-system-managed-system

Hi james,

Oke I will try this solution

Thanks

Hi,

Thank you for posting in Symantec community.

Could you please share the SEPM and SEP client version details? Is it SEP 11 RU5?

Hi chetan,

Sep Client version is Sep 11 RU7

Hi,

As per SEP 11 RU7 MP3 fix notes there is one fix releated to mentioned issue.

Unmanaged client appears in the Symantec Endpoint Protection Manager console
Fix ID: 2800124
Symptom: When you create and deploy a client installation package using the default group policy settings but with the Use Group Communication Settings setting turned off, an unmanaged client is installed.
Solution: Fixed an issue to remove the location-level communication settings in the exported package.

Reference: New fixes for Symantec Endpoint Protection 11 and Symantec Network Access Control 11

http://www.symantec.com/docs/TECH103087

Hello,

in the screenshot about your search for unmanaged clients, you can read that the client has not been found as "unmanaged" but as "unknown", it is not the same, hence the issue here is "a managed client is not shown/found in the console".

If as SEP agent is "online" but you don't see it in the console, most common reasons are:

1) the SEP agent is in user mode and your client view is not set to show users

=> try to view/search SEP agents in user mode

2) the hardware ID of that SEP agent is duplicate (did you clone that system?)

=> reset the hardware as explained in a previous post

Hii beppe,

My my client is cloning system for the laptop, But server is vm machine. can u post a guide for your solution

Thanks,

Helmy

Check this

Configuring Symantec Endpoint Protection client for deployment as part of a drive image

http://www.symantec.com/business/support/index?pag...

Check this also

How to prepare a Symantec Endpoint Protection 12.1 client for cloning

http://www.symantec.com/business/support/index?page=content&id=HOWTO54706

Hii james & chetan,

Thanks for update, but I have not done this solution for a few weeks because the customer is busy, I will update a few weeks

Regards,

Helmy

Hii all,

Thanks for support, missing client already signed on sep console

but how to search for the missing client because HWID , Anyone Help my

You can use Unmanaged Detector find missing client

https://www-secure.symantec.com/connect/articles/unmanaged-detector-sep-121

Configuring a client to detect unmanaged devices

http://www.symantec.com/docs/HOWTO80763

What does it mean to set a client as an Unmanaged Detector?

http://www.symantec.com/docs/TECH183746