Client Management Suite

 View Only
  • 1.  Report of managed computers without SEP

    Posted Jan 05, 2016 09:10 PM

    We used to have SEPIC installed with Altiris 7.5, but after upgrading to 7.6, I found that SEPIC is not supported on that version anymore (according to SIM).

    Does anyone have a report that will list managed Windows clients that do not have 'Symantec Endpoint Protection' installed? Can't seem to get my reports to work.

    Appreciate any help.



  • 2.  RE: Report of managed computers without SEP

    Posted Jan 05, 2016 09:31 PM

    Not anything you can immediately pull from the SEPM. You can use the unmanaged detector feature to find unmanaged computers but you need one on every subnet and it will also flag routers, swiitches, firewall, pretty much any network device as not having SEP.

    Configuring a client to detect unmanaged devices

    How to enable the Unmanaged Detector in Symantec Endpoint Protection Manager (SEPM)



  • 3.  RE: Report of managed computers without SEP

    Posted Jan 06, 2016 01:33 PM

    Hi!

    There are a couple of ways to accomplish this.  A specific one and a more robust solution.  If you are just looking for machines that do not have SEP installed you can do it in SQL.

    Logically what the query does is 

    1. Find all The computers
    2. Find all the Computers that DO have SEP
    3. Return the computers that are not in the group of computers that has SEP.

    If that makes sense

    
    SELECT
       [vri3_Computer].[Guid],
       [dca4_AddRemoveProgram].[DisplayName],
       [dca4_AddRemoveProgram].[DisplayVersion],
       [dca5_AeX AC Identification].[OS Primary Language],
       [vri3_Computer].[Name]
    FROM
       [vRM_Computer_Item] AS [vri3_Computer]
          LEFT OUTER JOIN [Inv_AddRemoveProgram] AS [dca4_AddRemoveProgram]
             ON ([vri3_Computer].[Guid] = [dca4_AddRemoveProgram].[_ResourceGuid])
          LEFT OUTER JOIN [Inv_AeX_AC_Identification] AS [dca5_AeX AC Identification]
             ON ([vri3_Computer].[Guid] = [dca5_AeX AC Identification].[_ResourceGuid])
    WHERE
      [vri3_Computer].[IsManaged] = 1
    AND
    [dca5_AeX AC Identification].[OS Name] LIKE '%Windows%'
    AND
    [dca5_AeX AC Identification].[OS Name] NOT LIKE '%Server%'
    AND
    [dca4_AddRemoveProgram].[DisplayName] IS NOT NULL
    
    AND
    [vri3_Computer].[Guid] NOT IN
    (
    SELECT
       [vri3_Computer].[Guid] FROM
       [vRM_Computer_Item] AS [vri3_Computer]
          LEFT OUTER JOIN [Inv_AddRemoveProgram] AS [dca4_AddRemoveProgram]
             ON ([vri3_Computer].[Guid] = [dca4_AddRemoveProgram].[_ResourceGuid])
          LEFT OUTER JOIN [Inv_AeX_AC_Identification] AS [dca5_AeX AC Identification]
             ON ([vri3_Computer].[Guid] = [dca5_AeX AC Identification].[_ResourceGuid])
    WHERE
    ([dca4_AddRemoveProgram].[DisplayName] LIKE '%Symantec Endpoint Protection%')
    )

     



  • 4.  RE: Report of managed computers without SEP

    Posted Feb 02, 2016 01:15 PM

    hi HDH1,

     

    any luck with the SQL i shared?

     

    Thanks