This issue needs a solution.

License shortage incorrectly indicated, system not reporting status of all clients

Created: 11 Apr 2013 • Updated: 11 Apr 2013
Login to vote
0 0 Votes

My location is running SEP on one server, upgraded approximately two months ago to 12.1.2015.2015.  We have purchased hundreds of licenses.  We are not synced with LDAP or Active Directory.  Until the day we upgraded to 12.1, SEPM was reporting that we had about 50 less installed clients than licenses owned.

After upgrading to 12.1, we immediately began receiving warnings that we have insufficient licenses, to the tune of 700+ licenses.

As recommended elsewhere, weeks ago, I ran a database purge (down to 1 day, then back to 30 days), and now the console reports that we have only 50+ computers reporting their endpoint status.  I can prove that we have more than 50 managed installations on computers on just one part of one floor of our office, and that they are receiving updates daily, so something seems very wrong.

My goal is to make the number of installed client licenses actually report correctly, and I'd like the console to reflect the fact that we have WAY more than 50 managed clients that are connecting and receiving daily updates and have it report their conditions.

I understand that queries can be run against the database, but I haven't found the manner in which to submit queries yet.

I have reindexed the databases twice.

Would someone be willing to guide me to instructions that I can use to (1) force any unmanaged clients that might have slipped through to be forced into a managed state, (2) create a list of machine names of all computers that SEPM counts as installed, so I can find the mistakes, and (3) force the system to correctly count and report our clients?

Thanks!

-David

Filed Under

Comments

11
Apr
2013

Hello you can delete inactive

Hello

you can delete inactive clients from console by following the steps as mentioned in the article

http://www.symantec.com/business/support/index?page=content&id=TECH175865

You can set delete client automatic N days

https://www-secure.symantec.com/connect/forums/rem...

 

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

11
Apr
2013

under monitors-logs-computer

under monitors-logs-computer status

click on advanced (blue link at the bottom)

select online clients.

How many clients are online? Quite possible that the clients you installed never reported to SEPM at all.

SMLatCST
Partner
Accredited
12
Apr
2013

Another factor that may

Another factor that may affect the accurate reporting of the number of clients, would be if they were originally deployed from a shared image that contained SEP.  If the image had not been correctly prepared for imaging, SEP's unique identifier can end up being copied, which then results in mulitple clients linking into a single client record on the server (and resulting in inaccurate license usage).

Does this scenario apply to you by any chance?

If so, then I'd recommend checking out the below article on how to discover if multiple client are using the same ID:
http://www.symantec.com/docs/TECH157434

Followed by this article that explains how to repair the duplicated ID's:
http://www.symantec.com/docs/TECH163349

If this scenario does not apply to you, then I shall move onto your questions:

  1. To change clients that may be in an unmanaged state to managed, you'd have to change their communications file.  The below articles list various ways of accomplishing this:
    http://www.symantec.com/docs/HOWTO81109
    http://www.symantec.com/docs/HOWTO55428
    http://www.symantec.com/docs/TECH106288
  2. Off the top of my head, I'd suggest running a search for all clients, exporting to CSV and filtering out all those that have an empty/null "Last Check in time".
  3. Unfortunately, without first determining why the disparity exists, I can't advise what would fix it. crying
Chetan Savade
Symantec Employee
Accredited
12
Apr
2013

Hi, Q. force any unmanaged

Hi,

Q. force any unmanaged clients that might have slipped through to be forced into a managed state

--> You can configure unmanaged detector & notifications as well

SEP 12.1 - What does it mean to set a client as an Unmanaged Detector?

http://www.symantec.com/docs/TECH183746 

Total on how many machines you have deployed SEP client? Out of them only 50 machines are showing into the console?

Do you see any communication issue with machines which are not showing online in the console?

Q .create a list of machine names of all computers that SEPM counts as installed, so I can find the mistakes,

-->  I don't think it's required. If it's started showing overdeployed then you can delete the clients that have not connected.

Q. force the system to correctly count and report our clients?

--> If there is not any duplication of records then it should show correctly in the license count.

Ideally if image is deployed without following best practice then there can be a duplication of records.

Chetan Savade
Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

12
Jun
2013

At my company we have

At my company we have everything set to USER mode rather than COMPUTER becasue of the policies we have in place.  We need the policy settings to follow the users no matter what PC they log into.

My question is this, since we have multiple users actively logging into multiple machines (such as administrators) does each login instance count as license/seat?  Our SEPM also shows we are overdeployed by an outrageous number as mentioned by DHarmon in the original post.

 

Chetan Savade
Symantec Employee
Accredited
13
Jun
2013

Hi, Seat count is based on

Hi,

Seat count is based on number of Computers, not on Users or User Mode.

Refer this article:

Do User Mode Clients in Symantec Endpoint Protection 12.1 Require Additional Licenses

http://www.symantec.com/docs/TECH163955 

Make sure you have purchased enough license to avoid over deployment in the network.

Chetan Savade
Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<