Endpoint Protection

Currently we have PCs that we leave off for a while and they do not get the updates for a month or two at times.  Is there anyway to remove clients from SEPM after maybe a couple weeks if they dont report in AND then have them added back when they are turned on again?  The old defs on the PCs that have been off for a while are messing with my reports.

thanks

Yes, it is possible. You would have to configure SEPM to mdelete the clients  that have not checked in after XX days. You can configure this option from Admin-Servers-Local site properties.

These clients would automatically report back to SEPM, once they connect back.

Cool, thanks.  Any idea how long it takes for the clients to remove after I adjust the setting?

By Default 5 minutes....

cool, thanks again

It has been a while and PCs that have not checked in in over a week are not disappearing from SEPM.

Hi folks,

This thread is now included in the Security Solutions Contest.  Answer / solve the original poster's question, and you could be Crowned "King for a Week" and win a weekly prize.  Check out more details on the blog!

https://www-secure.symantec.com/connect/blogs/security-solutions-contest-be-king-week

Best,

Eric

You may need to restart the SEPM, and the  Symantec Embedded database services....

Trying it now.  I am assuming I have to wait the 5min again after I restart the services.

The clients still are not removing.  Any other ideas?

EDIT

I have SEPM syncing with AD so that could be hte issue why they are not being removed.  However, I am still getting them reported as being there via the HOME screen.

Once Clients are removed from AD..in next Sych ( default 24 hrs ) Clients will be removed

Yea, that was my mistake.   However, is there any way to get the home screen to NOT report on PCs that have not conneced to SEPM for a while?

I believe that you'd want to know about PCs that were not connecting. This is no reflection on how SEP is working. I investigate these types of problems instead of hiding them. Just my 2 cents.

I would set it, if I could, to not display disconnected clients that have been offline for more than two weeks.  Some systems dont get used for months at a time and I really dont want to see those show up as out of date or problems on the home screen.

I think you have to look at a domain level solution for achieving your goal.Once you delete your client in the AD and do a sync,that client will disappear from SEPM also.

To find clients that are Offline:

1.In the console --Monitors -- Logs-- Computer status--Advance Settings--Set specific dates which you want from and to.--

2. Make computer status Online status to Offline

After report generated you can remove manually offline clients.

If you have Domain Controller in your network

1.Add the Domain to your SEPM server

2.You cannot delete items that have been imported from AD.

3.You can only sync by right clicking on the AD group where the machine appears and select "sync now".

The SEPM does not have the ability to manipulate any AD items. It synchs with AD and must be resynched to reflect changes.

SEPM itself can do

 If you have Domain Controller in your network

1.Add the Domain to your SEPM server

2.You cannot delete items that have been imported from AD.

3.You can only sync by right clicking on the AD group where the machine appears and select "sync now".

The SEPM does not have the ability to manipulate any AD items. It synchs with AD and must be resynched to reflect changes.

Is there any downside to setting this setting very low so that machines that have been taken off the network recently will not show in the list? I'm migrating my PCs from MR3 and MR4 to RU6a and I've found that during the migration if there are PCs that don't check in, they continue to show in my older group and I end up trying to move a bunch of clients that no longer exist. I'd like to set this as low as maybe 3 days during this migration, but I don't want to cause any issues with SEP or the SEPM.

Are you bothered about the security status in the home screen?In your home page near security status click on preferences.Go to security status tab,change the values as required or you can select /deselect some conditions,click ok.Log off and login,your login screen will give you a status as good.