Below is from Symantec Support - in our case I think it is due to item number 3, I have checked some of the duplicates and found both aclient and dagent installed. This has happened over time with our move to Windows 7 and images now having the dagent installed. Previously we have had a group policy to deploy aclient and some windows machines have been imaged in the wrong OU getting the aclient install.
There are several causes and remedies for this issue. Please try the following:
1. In the Deployment Solution console navigate to Tools > Options and under the Global tab check the box Synchronize display names with Windows computer names.
2. At the bottom of that same page, enable all Primary lookup keys before clicking the Apply and OK buttons.
3. Check to make sure the computers that are being duplicated, do not have both the AClient.exe and the DAgent.exe both installed at the same time. You can use the DAgent client or the AClient, but never both at the same time on a single computer.