Endpoint Protection

Background: My first experience with the SEPM was with MR4 MP2.

I was able to successfully build a 11.0.4202 package that placed new SEP installs into the proper, separate group for my division.  

Later, we then upgraded to RU5 and again I successfully built a 11.0.5002 package that placed new installs into my group.

However, after upgrading to RU6a, I am no longer able to build a 11.0.6005.562 package which will place new clients into my group.

After expanding this new single exe package, I found that the SyLink.xml file in the new RU6a package differed in that, unlike the RU5 package, the
<RegisterClient PreferredGroup= ...  tag is not specified.  As a result, having done two new client installs before realizing this problem, those clients instead of course ended up in the Default Group.  I of course tried exported the package two more times, making sure I was in fact specifying my group, but something has clearly changed on at least our SEPM or in RU6a itself.

This sure sounds like a bug I found in the release notes, 1418576, which was fixed back in MR4, back before I even started deploying SEP 11:
> Fix ID: 1418576
> Symptom: Location-specific communication setting does not honor the preferred group and preferred mode.
> Symantec Endpoint Protection Client reports to Default Group
> Solution: While exporting a package, preferred group information and preferred mode information is set to
> these location-specific communication settings.

Also, I have verified that the "Use Group Communication Settings" checkbox is still checked for my group (as it also chekced at the top My Company level), in case someone was going to ask me about that setting.

Anything else I should check or is this really a new manifestation of that old bug?

Hi,

I've just tested and can see "RegisterClient PreferredGroup" with my preferred Group.

Here is the steps with RU6a:

Option 1:

1. Exported a Package without checking "Create a single .EXE file for this package
2. Selected desired featues
3. Policy settings selected my Preferred Group
4. Ensured "Add clients automatically to the selected group" is checked
5. Computer Mode
6. Created the Package
7. One it is created I can see "RegisterClient PreferredGroup" as my desired Group in the Sylink file

Option 2.

1. Exported a Package while checking "Create a single .EXE file for this package
2. Selected desired featues
3. Policy settings selected my Preferred Group
4. Ensured "Add clients automatically to the selected group" is checked
5. Computer Mode
6. Created the Package
7. One it is created I can see "RegisterClient PreferredGroup" as my desired Group in the Sylink file

All good.

Question: If  create a new group and export the Sylink File and does it contain the preferred group?

Thankn you.

Moin

Hi T.T.,

I have exported setup.exe files from RU6a SEPM and the clients they installed went straight into the desired group.

Please keep in mind: that "PreferredGroup" which is part of the sylink / becomes part of the Registry is fairly low-down in the logic that determines the palcement of SEP clients into groups.  If a pre-existing user or computer record is found, the SEPM will recognize the registering client and place the client into the group associated with the older record.  If the PreferredGroup is specifying a Client Group that was created through an OU-sync, but the client computer is NOT a memeber of that OU, the client will go into the default client group.  PreferredGroup is not a guarantee.

Please let the forum know of your progress! 

Thanks and best regards,

Mick

Mick:
The installs I did which ended up in the Default Group were brand new SEP installs and that's when I extracted the package and found that there is in fact no reference to my desired group in the SyLink.xml file in the release 6005 installer package, which of course means the group reference has no way to end up in the registry on those computers.


Moin_Sobhan:
It does sound then that something changed out our SEPM after the RU6a upgrade that did not change for you.  For one thing, we didn't install RU6, but went straight to RU6a from RU5.
Did you first install RU6?

Also, I'm a limited administrator, I don't have full control over the entire SEPM, just my group.
I'm assuming you are the admin in charge of your SEPM?

Hi T.T.,

I am a full admin on the SEPM, and extracting that setup.exe confirms the sylink is correctly created in RU6a:

  <RegisterClient PreferredGroup="My Company\marketing" PreferredMode="1" />

Creating a limited admin and trying the same thing: you are correct.  No PreferredGroup.

I have checked on this issue and have some good news.  This will be fixed in the next release of SEP 11, RU6 MP1.  That should be available within a month or two.

Thanks and best regards,

Mick

Thanks Mick.  Until then, I'm having the SEPM admin create the new 6005 package for me.