Endpoint Protection

We have an HI policy in place in regards to a secondary application.  It checks IF Reg key exists AND File exists AND NOT Registry value THEN Run a program which runs a command in the application.  END IF THEN it checks the same IF/AND/AND NOT and runs a second command. It does this twice more and in the last checks IF NOT Reg key exists OR Registry value exists AND Registry value exists THEN Return: Pass.  END IF Fail.  

In testing this ran as expected and for multiple machines after putting in to production we got the same results.  In checking the logs now however I'm seeing a hundered machines that are returning Fail:  Script Failed.  I'm not sure why I'm getting this on these 100 when it seems to running fine on the other 24k+.  

All indicated clients are running 12.1.6 MP1.

Would be interesting to see your HI script. Can you post a screenshot?

Are there differences between the 100 PCs and the others? (E.g., OS)

Please check the security log of one of the affected clients. It's quite detailed concerning HI.

I used the directions given in https://www-secure.symantec.com/connect/articles/moving-sep-clients-independent-sepm-another-independent-sepm to migrate computers to a new SEPM.  This is occurring on 40 workstations running mostly windows 7 with a few still on XP and one Vista.  Multiple Groups.