I've remove IPS feature for some clients from SEPM 2 week ago. However SEPM dashboard - Security Status show Intrusion Prevention Signatures is exipred on those clients today, how can I remove this fault alert?
Are you using SEP 12.1 ? Check this document!
No, I'm still using 11d.
I can change the date or disable the alert from dashboard, but it doesn't solve the problem.
sometimes it needs a reboot to remove components, make sure that they dont have NTP, PTP installed.
Delete the clients from SEPM ,right click on client update policy, they should come up with new info and get registred with the manager.