Endpoint Protection

Hi,

I have a question regarding installation of SEP and placement in the group structure on SEPM.

Found this in another discussion:

"If a pre-existing user or computer record is found, the SEPM will recognize the registering client and place the client into the group associated with the older record"

I wonder what is meant by "computer record" and where this record is placed?
Is it on the client (registry, files)?
Is it on the SEPM?

If I reinstall a client from scratch (OS and everything), and it gets same computer name as it had before, will SEPM place that client in the same group as it had before? Or will it apper to SEPM to be a new object, and create a new computer object?

If you install SEP on a client which had SEP previously and was uninstalled, In that case it would be a new install again and it would take the group as the new package would ask it to.

Sylink.xml has all this information.

OK, so you are saying that any "pre-existing record" is on the client, and not on SEPM?

Once you remove a SEP client all its records are also removed.

When you re-install, It's a fresh install and new records are created.

By "remove a SEP client" you mean delete from SEPM?

What if the client is not deleted from SEP before uninstalling/reinstalling the client?

When you delete the SEP client from SEPM it comes back withing the next heartbeat. BUt when you uninstall the SEP client, It's automatically deleted from SEPM. Plus we also have a setting in the database which would delete the clients that have not checked in from the past 30 days.

I did'nt know uninstalling a client also deletes it from SEPM. How is this done, does the client send a request to the SEPM during uninstall? What if the client is not online with the SEPM when uninstalling?

uninstalling client does not remove the entry from db till the number of days have been configured on SEPM for clients not connecting to SEPM.

OK, when we reinstall the client is usually offline max a couple of hours, so that setting will not kick in and remove the server from SEP.

To get this straight:

I have a computer named Computer1 and this is placed in Group1.
I format the disk and reinstall with OS and SEP, the computer gets the same name and IP as it had before. The old computer object is still on the SEPM.

Will the new computer object also be placed in Group1, or is this only dependent on the settings in the Sylink.xml on the new computer object?