Endpoint Protection

Lets see if I can explain this correctly.  For the majority, everything is in usermode so MIS can have USB access.  I have two groups, one for servers, and one forvery limited number of computers, that are in computer mode to allow USB no matter who logs on.  This setup has been working great up until now.  All the computers in computer mode were upgraded to Endpoint 11 from Symantec 10.  Now here is the problem.  We updated our image (Windows XP sysprepped) so that it now already has Endpoint installed.  it registers and works great in user mode.  As soon as I switch it to computer mode and move it to the proper group, within 10 minutes it changes.  By changes I mean this:

When I hit refresh, first a different user shows as logged in, then the computer name changes all together.  Looking further into it, the IP address info chanfges as well.  it randomly does this, sometimes going back to the proper computer name but never staying correct.

delete the registry key if you have used an image as per this document

Configuring Symantec End Point Protection for deployment as part of a drive image

http://service1.symantec.com/SUPPORT/on-technology.nsf/293a5302ae81e39288256ebb0049cfe7/0e2c1c8989fe2a268825748a004a565c?OpenDocument

I will try that, but I forgot to mention, I ran CleanWipe and reinstalled Endpoint with the same outcome.  Shouldn't CleanWipe have deleted that registry key?

for RU5 clients it should be this link

http://www.symantec.com/business/support/index?page=content&id=TECH96808&locale=en_US

cleanwipe should have deleted all the symantec registry;however  lets try it once..:)

I am running 11.0.6100.645, I asssume that is RU5 or higher?

yes its higher; what is the hearbeat u have set for these clients?