Endpoint Protection

I am making two master computers for an image I will be using. One will be used on Dell Optiplex 745 machines and the other I am making is for Dell Optiplex 760's . When I go into the "Find Umanaged Computers" in SEPM I am unable to locate both machines. I tried by IP range as well as computer names. I am an administrator on both machines and I still don't even see them in the "unknown computers" tab of the wizard. I am running Vista on both and I am using verions 11.0.4014.26 of SEPM. I have turned off the firewall and made sure that Network Discovery is on. Share Wizard(simple file sharing) is also turned off on both machines.

Any help would be appreciated. Thank you in advance!

When using the 'Find Unmanaged Computers' tool, use the Windows Vista built-in Administrator account and password for the Logon Credentials and select the correct Domain or Workgroup before starting the installation.

See KB - http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007091919104648

Here is another useful KB - http://service1.symantec.com/support/ent-security.nsf/docid/2007100419174948

About the Find Unmanaged Computers function in Symantec Endpoint Protection Manager
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007100419174948

Best Practices: When to use the "Find Unmanaged Computers" or "Unmanaged Detector" features in Symantec Endpoint Protection 11.0

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2008030514404548

Title: 'Symantec Endpoint Protection: Preparing computers that run Windows Vista for remote client deployment'
Document ID: 2007091021513648
> Web URL:
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007091021513648

First I would like to thank you all for your fast response and willingness to help, but I still have the same problem.

I have gone through all these walk throughs and instructions before, but it still is not finding the computers.

I have used the local admin account
I set Remote Registry to Auto
I have turned off File Sharing Wizard
I have Network Discovery turned on
I turned OFF the firewall just to make sure.

Any other suggestions?

What about UAC?  Does disabling that change anything?

I'm not sure if that would give me a problem finding the machines. I am able to ping the machines and I would tend to think UAC would cause a problem more for when i'm installing would it not? However I did disable it and give it a test and still nothing.

I was also wondering about the fact that shouldn't I still see the machine in Unknown computers if I use incorrect credentials?

yes the computers on which  SEP is not installed will be listed under Unknown computers

Check if the  NetBIOS over TCP/IP is disabled in WINS / TCP/IP Advanced Settings.


Open Network Connections.
Right click on Local Area Connection and click Properties.
Select Internet Protocol (TCP/IP) and click Properties.
Under the General Tab click Advanced.
Click the DNS tab.
Make sure that "Register this connection's addresses in DNS" is checked.
Then click WINS tab.
Under NetBIOS setting make sure that Default is selected and NetBIOS over TCP/IP is not disabled.

I went through those steps you mentioned, those settings were all correct. I did try changing it to Enable NetBIOS over TCP/IP instead of the default just for stupidity's sake and still didn't work. Any other suggestions?

Hello Keithsmb
any firewall block th commication clients to sep ? can you access sep manager from client manager telnet or \\ipaddress ?

I currently have the Windows firewall turned off. I also do not have any type of other Firewall Currently installed on the system.

I am able to browse to the computer with its ip address as well as its DNS name in explorer.

Hello again.
you can see logon credentials in right side. did you write your information in there? its will be wrong?
or if you not write there please try with write your domain administrators account.
for example:
user name fatih
pass:          test12345
domain  :   mydomain

can you try like this please?

Yes, I have tried with my logon that has admin rights, I have tried with the local admin, and I have tried with a domain admin. All three are not working. Also if my credentials are incorrect wouldn't the computers still show up in "Unkown Computers"? If that is the case I'm not to sure that credentials would be the problem.

if you want to connect one computer you must to have administrative rights. credentials is important.
But this is realy interesting you have admin rigths and couln'd see any computers. you can connect it with \\ipadress but you cannot see in unknown computers.
I don't know what is the problem. I hope this problem will resolve.

I hope that this issue has been seen and resolved before. I find it rather odd that I'm unable to see any unmanaged clients. Is there no one out there who knows how to resolve this issue?

Hello again.
can you try this please. give ip address which client you know don't install sep and try to search.
like if client ip adres is 10.0.1.50 give this ip address range 10.0.1.49 to 10.0.1.51
maybe this way it can find a result?

Thanks for that suggestion, however I've done that already as well.

Maybe it is time to place a call to Symantec support. Update us here when support finds the problem.

Thomas

Thanks Cycletech, I was hoping that someone would have seen the problem here and got it working. Oh well. Thanks everyone who tried. I'll call and update for the solution when I get it working.

I hope it is not a big problem :)
Have  a nice day. and we are waiting how to fix this problem :)

I called up Tech Support and the Tech went through all the same things that you guys suggested, but still nothing. I wanted to stay away from manual install of the client by exporting the package and then transfering it to the client machine. But that is what I did. The client is installed on the machine, but it wasn't pushed. So it is more of a work around then a solution to the problem. I really hope myself nor anyone else ever comes accross this problem again.

Thanks again for all your help guys!

I had an additional thought regarding Find Unmanaged Computers and incorrect displays of information returned (wrong machine name associated with IP, etc, which I have encountered before).   Find Unmanaged Computers displays network information, but it may be referring to previously cached information that is not correct.  It may be worth flushing DNS caches and see if there is a change in what Find Unmanaged Computers returns.

For example, from a command line, try
  ipconfig /flushdns
  arp -D
  nbtstat -R

I hope this helps!

Wouldn't that not make a difference if I'm also using the IP range? I tried it though and it doesn't seem that it worked. Its ok I'm just gonna install manually. thanks for the help everyone! This problem will probably just not get solved.

I ran into a similar problem today when attempting to deploy the client to a few machines. First, SEP couldn't find the PC from "Add Unmanaged Client' option  or through Deployment Wizard. Then after fixing the DNS issues it finally came up but under Unsupported Computers. Still wasn't able to deploy the client to this machine, so I tried to deploy the client with Deployment wizard, but no luck there either... I noticed that PC wasn't listed in My Network places, I installed "File and Printer Sharing" in Local Area Connection Properties, PC then was listed in My Network Places > MS Networks and then I was able to deploy the client.  Another thing that Symantec recommends is to make sure that "Remote Registry" service is running.