Endpoint Protection

 View Only
  • 1.  Client's don't automatically change groups based on policy settings

    Posted Mar 10, 2009 02:28 PM

    I am running SEP 11 MR4, and am seeing issues with clients who don't automatically change "location" or group based on the settings I entered under "manage locations".  For example, I have various offices each with their own "location" group.  I setup the locations with a range of IP addresses.  If a client falls within a certain IP range, it should be automaticalyl moved to the appropriate group.  However, what I am finding is that the clients are not moving themselves automatically.  I am having to go into the console and move them manually.  Now part of this may be because I manually setup my locations, I did not use the software deployment manager to create my locations or groups.  So all of my clients are installed with a client package created with an un-used initial temp group.  Anytime we push a new client it goes to this temp group and even though the IP range should cause the client to move locations, it does not.  So my question is, how does all this work, and why is it not working for me.  Am I missing something?

     

    Thanks



  • 2.  RE: Client's don't automatically change groups based on policy settings

    Posted Mar 10, 2009 03:59 PM

    I do not think you can move a client from one group to another via the location awareness.  However, you can have a client change to a new management server list based upon the location.  I have never found really good directions on how to do this but you would need to setup multiple management server lists... your location awarenss policies, and then depending upon the location which management server list to use... which can be done via the images below.

     

    imagebrowser image

     

    imagebrowser image



  • 3.  RE: Client's don't automatically change groups based on policy settings
    Best Answer

    Posted Mar 10, 2009 04:39 PM

    Yeah, that's not what location awareness is or does. It won't move them from one SEP group to another, just change rules, etc. based on their location. They will remain in the group in which you place them, or in which the original install places them until or unless you choose to move them manaully.