Endpoint Protection

I know this has been touched upon a number of times but nothing I've read during my search has solved my problem.

I've got at least 50 computers, all dell laptops, (latitude d610s, d620s, d630s) on the network that no longer communicate with the server.  The policy numbers incorporate dates from 2008 up through 2009 so I cannot even pinpoint a relative time that communication was lost.  It seems to be random.  There are a couple hundred other computers, same make and models, on the network running endpoint just fine.  None below version 11.0.4202.75

I've dropped and replaced dozens of sylink files manually and with the drop tool and replacer

secars runs fine

i can ping and telnet into the server

there are enough outgoing connections

ran sytoggle

ran SEP support tool

turned on debugging

had symantec tech support analyze these files with no firm resolution

I've tried updating some clients to RU5

The strange thing is that if I were to reimage the laptops and redeploy them, Endpoint would work.  So it seems like some kind of update to the OS may have caused a problem, however I cannot find any consistency there between laptops that work and those that dont.  It's not feasible to try to redeploy new laptops to all these users so I, like many others, am looking for a way to resolve this remotely.

I'm pretty much at my wit's end with this thing and hope somebody can shed some light or point me in the right direction on this.

Thanks

 

what is the ratio of computers not managed?
any similarities with the computers having communication issues...
thanks..

Try this:

http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/012986c18a2387b88825750c007870b9?OpenDocument

Then restart smc

I got that problem as well.. the best thing to do is to uninstall SEP on the client computer from add and remove program, make sure you delete all the registry files for SEP on the client computer..
From your server run the deploy wizard and reinstall SEP..  then check if you see the green dot again..

Yes... Start from scratch...
this would give you lesser worries in the SEP installation...

 

By the way, before doing so... 
If the computer involved have no green dot on the SEPM console, had you also tried to physically check the computers if they also have no green dot in the Symantec shiel in the task bar?

Try:
Click Start > Run, type Regedit, and then click OK.
Go to the following key:
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\InternetSettings
In the right pane, double-click GlobalUserOffline, then change the value to 0.

Thanks...

My one the client was not showing a green dot and obviously the name of the computer was not showing at all in the SEPM server..

Try by using cleanwipe to uninstall and try to install once again... 

Nel Ramos and bpohlman.

that worked.  thanks!  so simple, but i couldnt find the answer