Endpoint Protection

Hi, we have our SEP console tied to our AD, and the problem lies when a computer has been replaced but is re-using the same IP address.  The SEP console thinks that this computer is turned off, and because our Active Directory Server is tied into our SEP console, we are unable to delete the obsolete entries.  They have been removed in AD, but still appear (and stay) on the SEP console.  When I try to right-click on the device and select 'Delete', the Delete command is ghosted.

I have tried removing the AD server in Admin/Servers/<servername>/Directory Servers, but the option to delete the obsolete item does not become available, even after giving it time to replicate between the domain controller and the SEP server.

Any idea how I can get these old computer names off our list?  Needless to say, this is a little frustrating.

Thanks to anyone who can help.

Dan

You cannot delete the AD client becuase it is teh list that comes/inported from AD. If you need to delete you need to delete from AD.

http://www.symantec.com/business/support/index?page=content&id=TECH98152&locale=en_US

Open SEPM and click on the Admin tab.

Click on Servers.

Select the "Local Site" from the list of Servers.

Under "Tasks," select Edit Site Properties.

Under the "General" tab, there is a check box that says "Delete clients that have not connected for X days." By default this is set to 30. Change the number of days as desired.

Click OK.

Thanks Pete!

This number was already set to 30 days, but some offline clients are still listed in there that are way beyond 30 days.  I've changed it to 10 days.  How often does this update?  Even though the SEP Management console is tied to AD, will it delete the obsolete clients only on the SEPM console?  How often does this refresh?  How often does it keep trying until all the machines 10 days or older are off the list?

here is the best way

remove the OU you have imported and import it again, 

only active will come

if the client is offlibne for 30 days, then it will be delted in the data sweeping task which occurs at midnight.

Even though the SEP Management console is tied to AD, will it delete the obsolete clients only on the SEPM console? 

if the client is part of AD, it will not delete as SEPM only will get the information from inported OU.

Can I safely do this in a Production environment with over 800 clients?  What are the steps?  This seems like the ideal solution.

you can do that, take a backup of db..

it wil work without fail 

here is the disaster recovery doc

http://www.symantec.com/business/support/index?page=content&id=TECH102333

it worked all the times for me..

Dear All,

I have a same problem.

My client machin is not connected to SEPM since last 30 day, bu still it show in my console.

Instade of remvoe manualy is there any way that SEPM will take care of this.

Thanks in advance.

Shri !!

Amazingly, the change from 30 days to 10 days is working!

I haven't done anything special, all I did was give it time to weed through the disconnected computers and it seems to be removing them one by one, albeit a bit slowly.  I've taken that 10 days once again and shortened it to 5 days.

What happens after 5 days if the client reconnects itself to the domain?  Will it show up on the console again?

Shri, just be patient, if you do what I did, it should work for you.  Just set the Remove Computers After to a smaller number and you should start seeing them disappear.

Thank you for your help!

Dan

How does SEPM determine how many days old the offline client is?  Is it from the "Last Scan" date and time?

Last check in time. If the last check in time is more than 10 days old in your case, it will be removed from SEPM console.

After a client is removed from the SEPM console if it didnt checked in for last 30 days/custom set days, sometimes later the client recheck in the network after removal from the SEPM console.

whether SEPM recognises it and add it back to the same group in the console are it will not allow it to report.

what will happen to the client?

The client will report to the SEPM as soon it connects after 30 days ( configured), it will be added to the preffered group settings ( created during the client install package).

Truth is, I thought it was working, but it's not.  Rather, now I have a whole lot of clients with no 'green dot status' on them, but the last check-in date on most (not all) of my clients is within my specified 5-day last check-in time and date.  What could be causing this?  There seem to be a lot more on the list since yesterday.

does this SEPM replicate with other SEPM?

No replication.

What is the time you have set to delete the clients from the SEPM console, client not connected to SEPM?

if the client falls within this configured time, even clients are offline it will show up on the SEPM console.

There is no 'set time' to delete unresponsive clients.  In the Site Properties, in the General tab, I selected "Delete the clients that have not connected for" and set that to 5 days.

However, you are the expert - tell me where to set the time to delete these clients.