Endpoint Protection

In a report that I get from SEMP Title of report " Virus Definitions Not Up-to-date"
There is about 407 clients listed: 
This is what one looks like
 Computer  / User                                    / IP         Virus Definition           Last Download    Last Check-in                 Domain                           / Server  / Group Name                /Product Version
XXXXXXXX / user.XXXX (Logged Out)  / x.x.x.x    2009-02-05 rev. 007   Never                    02/05/2009 18:17:55      Norton AntiVirus XXXX / XXXX    / Legacy Unassigned    10.1.6 Build:6000

I have no group named "Legacy Unassigned", These clients are in the database and I want to get them out so the report is correct. Can anyone tell how to "remove" this kind of data from the database?
Thank you any help

SeaBee

Symantec Doesn’t support that databse query

You can download Symantec™ Endpoint Protection Manager Database Schema Reference

ftp://ftp.symantec.com/public/english_us_canada/products/symantec_endpoint_protection/11.0/manuals/mr2/schema_reference_guide.pdf

Which databse you are using??

If this was a SEP 11 question I would say:
are you Sync_ing with Active directory? if so: manually sync with your Directory Server to move the clients to the correct group/OU

otherwise:

in the SEPM, goto Admin > Servers > select your site > "Edit Site Properties"

        here you can put a check mark next to "Delete clients that have not connected for (X) days" and select a time frame that makes sense (you might want to change this to 1 day then change it back after the unwanted info is purged)

But these clients are running SAV 10, so it would appear that you are either forwarding information from a legacy reporting server to the SEPM Database or it is waiting for the time frame after the migration in which it's supposed to purge information.

 

the customer states that the "databse query" was using the Reports function of the SEPM

@ Scott: What if he does a manual Sweep of the DB to clear out old logs / garbage data? Would that help?

I see this as well.  If you go into logs, click on advanced and hit the button on groups.  When the popup comes up, press the pulldown button/arrow and look at all the groups that are listed.  You will find many that were never created by anyone here.

I've asked before how to get rid of these and the only answer I ever got is they will purge out in 30 days.  Not quite.

I think they came with the package.

Hi,

Have you ever had a package assigned to that group before and deleted it later
you have mentioned that no such group , wondering if they were before.