Hi, do anyone know if there is a good/easy way to check if the clients in SEPM have the latest assigned policy serial number applied, according to the group it belongs to?

Cheers, Daniel

that information is not available via report.

check this

Understanding the Policy Serial Number of the Symantec Endpoint Protection Manager

If you go to the group and click on detail just take a note of the first four letters/numbers of policy and last three numbers

Then click on Clients and select Client status view if you click on the policy serial number column at the top it should order them by policy and you can scroll and just look for ones that don't have the matching numbers taken from the policy on detail screen.

Thanks, we have about 1000 groups and 85000 clients in one of the environemtns. After a policy change, I want to follow up how many of the computers actually got the change. It will take to long time. :(

I think ill make an enhancement request for this. I would really like this option in reports or in the client info. 

Need to check manually per group.

I would also suggest to go with new enhancement request.

Yeah will be a hard one as every group will have it's own policy if number so hard to confirm machines are up to date without going into the individual groups 

Would be worth throwing it out there as a possible enhancement. 

If you want to thumb up!! the link to the enhancement request.

https://www-secure.symantec.com/connect/ideas/include-group-serial-policy-number-computer-status-log

I just voted for it :) 

The Computer Status report will show what the latest policy is on the client but there is no way to compare to what's on the SEPM

Gets my vote

You can check from Monitors -> Logs -> Computer status log, export it and you can check by machine names what policy they have.

OR

From Reports as per the attached screenshot

Good thought, but when you have 1000+ groups it will take a while. :)

I guess the best solution right now is to ask the DB directly.