Endpoint Protection

 View Only
  • 1.  Disabled endpoint clients

    Posted Feb 16, 2013 01:22 PM

     

    hi all,

    A while ago i made this post about clients showing as disabled in my SEPM:
    https://www-secure.symantec.com/connect/forums/sep...

    Its still not all clear to me why some clients show as disabled, most clients show a recent status change, some clients have more or one feature disabled depending on the policy they have.

    I have over 1000 endpoint clients, sometimes showing over 150 disabled clients.
    I have some theories about why a client can show as disabled and would like to hear from you if im right about it:

    - clients got another computername
    - clients are reinstalled
    - clients have some functions disabled

    I also had a setting in my old 11.x SEPM i cant find anymore in 12.1, its the setting where i can define when i client is removed from SEPM in X days.
    If this setting still exists where can i find it? and what happens if a clients get over this threshold and will be enabled again, will it become active again?

    Also im working with ad groups in SEPM, often there are clients in AD groups not existing anymore, i guess this also will show as an disabled client ? and if the above x days threshold is active this is not working for AD groups?

    What if i want to go back and not longer work with AD groups. If i delete this AD group will the client come back in the default group if its still active?

    Hoping for some answers! Thanks,

    LEVD



  • 2.  RE: Disabled endpoint clients

    Posted Feb 16, 2013 01:27 PM

    That is why, if you intentionally disable a feature such as tamper protection, it will show as Disabled in the Status on the SEPM.

    This is a very misleading report some times. You need to click on more details to find out what is exactly disabled but some time the assumption can be that SEP is disabled overall when in fact it is just a component that is.

    And yes, if you delete the AD group, clients will start to show back up in the Default Group

    The option to set on time to delete clients has moved in 12.1

    Go to the Admin page

    Domains tab

    Click Edit Domain Properties

    And it is on now on the General tab here



  • 3.  RE: Disabled endpoint clients

    Posted Feb 16, 2013 02:22 PM

    Can you please confirm that the client which are reflect in disable report.

    What is the status in Client Group?

    Are these online/offline?



  • 4.  RE: Disabled endpoint clients

    Posted Feb 16, 2013 07:33 PM
    Brian81, Thanks this explains some thing. Can you also tell if when a client is deleted because its over his threshold for X days and gets deleted it will get activated again? Maybe i will set 2 weeks, maybe a clients will be offline for 2 weeks and 1 day. Thanks! Levd


  • 5.  RE: Disabled endpoint clients
    Best Answer

    Posted Feb 16, 2013 07:47 PM

    Yes, it will come back as loing as it can contact the SEPM. Just because it gets deleted doesn't mean it can no longer be managed.It just means it got deleted from the group. WIll show back up though.



  • 6.  RE: Disabled endpoint clients

    Posted Feb 19, 2013 12:38 PM

    Brian,

    Thank you for your information.

    Levd