I have around 100 groups created in my SEPM.Based on the regions i have created those groups in my SEPM server.

When we install the SEP client on any workstations/servers it should be listed under a particular group automatically.

Is there anyway to do this??

Please advise.

create a SEP package for the groups and use the installer. Client will be part of the specific groups.

If not all the clients can be installed under default group and then you can move the client move script tp moce to the intended groups.

Script?can you please provide me the script?

Thanks in advance.

You can use this download

https://www-secure.symantec.com/connect/downloads/moveclient-script

#

How do I move a large number of SEP clients to a new group at once?

https://www-secure.symantec.com/connect/articles/automate-symantec-endpoint-protection-client-move-script

the script will be in tools folder

check this link

http://www.symantec.com/business/support/index?page=content&id=TECH98302

you dont have to do any extra effort to do this

when you export the package select the group it should report to. This will set preferred group value in Sylink. After the install is done , the client will report to that particular group.

Not many people use this group coz if you have 100 groups you need to create 100 packages this costs storage space.

The best thing AFASIK is to create a package with Default group . Then move the groups to appropriate group using this tool

How to use the MoveClient Utility to switch multiple machines between computer and user mode.

http://www.symantec.com/business/support/index?page=content&id=TECH157429

Hi,

Thank you for posting in Symantec community.

I would be glad to answer your query.

As everyone said you will have to perform manual steps. I would suggest to move them manually to the correct group or use the script.

Other option can be synchronize SEPM with Active Directory server.

Check the following article.

How to configure Symantec Endpoint Protection Manager to synchronize user data with a directory server

http://www.symantec.com/docs/TECH96201

I have thought of doing this myself as we move or migrate to VMWare VDI desktops, however, I have some concerns...

Our AD structure is quite complex. Computers are organized in AD in multiple business units, but those would need to all be in one SINGLE SEPM group.

There is another group of computers used by our customers and public that would need to go into another group.

Can SEP take computers out of 10 groups and put them in 1 group in SEPM, but computers from the 11th group put them into a second SEPM group?

Can I map AD locations to SEP locations, taking members of several AD groups or locations and put them in a single SEPM place?

Can I do this with computers OR users, or users only? I don't mean "comptuers AND users" at the same time, but if I changed things to user mode - can SEP read the AD users/people and deal with that, or does it only deal with computers in AD?

The "books" or manuals aren't really clear - and I prefer to hear from someone who has "done it", been there.

We have ONE single VDI gold image from which all desktops will be created. But some users with a certain user ID pattern will get one type of desktop, locked down in AD and VDI while others get another desktop - the employees. I could have us create multiple images in VDI, but that's a lot more work than maintaining a SINGLE VDI image. So SEP is installed on the VDI gold image, and all desktops end up in one SEPM group - I need to split some off to a different SEPM group when they are launched.

Hi Ravi,

Do you need more help ?