Hi,

We've tried to reinstall an SEP agent(from 12.1.4 to 12.1.5) remotely, and move it on a different group, upon checking on the endpoint the client was installed with the new version, BUT it was still on the same group as the old one, which it shouldn't.

Any thoughts guys?

Thanks,

Why you reinstall sep client ?

you can use autoupgrade feature for upgrading sep client.

Upgrade Symantec Endpoint Protection 12.1 clients using AutoUpgrade

https://support.symantec.com/en_US/article.TECH96789.html

yes we can do that, we've been doing that on other groups but this is a special group we need to do it manually because of internal requirements. Do you know what's wrong on our issue?

Thanks,

Does your SEPM are AD integrated ?

Does sep client received updated policy after move new group ?

Yes SEPM and AD are integrated, but only for SEPM admin login accounts.

Yes they also recieved policy, we also try to manually import the policy from the SEPM Server to the agent.

Create an installation setting with this step and push the new package

How to restore/retain client-server SEP communication using custom installation settings without having to use the sylink drop tool on SEP 12.1
 

https://support.symantec.com/en_US/article.TECH173377.html

While exporting package did you selected correct group?

Yes we pick the correct group for it. That's how we found out that it's not showing on the correct group, becuase what we choose and what we saw on the client side is not the same group.

We need to move clients from one sepm to another, there's no offline agents on our network.

A managed SEP client will not change group or domain membership in SEPM after some operations, such as importing new communications settings (SyLink.xml) or re-installing or upgrading the client with a new package exported from the SEPM.

To otherwise change the group or domain membership of an existing managed SEP client, use one of the following methods:

• Use the move operation in the SEPM clients list (only available for changing groups, not domains). Simplest.
   
• Delete the client's entry in the SEPM clients list, then deploy new communication settings to client *
   
• Delete Hardware ID files from client, then deploy new communications settings to client **
   
• Use the MoveClient tool in the /Tools/NoSupport directory of the SEP product media.

I would recommend to go through this article for more details:

A managed Symantec Endpoint Protection client will not change group or domain membership after some operations

http://www.symantec.com/docs/TECH230267

or else need to follow this article

How do I move a large number of SEP clients to a new group at once?

http://www.symantec.com/docs/TECH98302

How can we Delete Hardware ID files from client? this seems to be the right answer for us.

This article can provide you all the possible locations: http://www.symantec.com/docs/HOWTO54706

#Edit:

Need to delete sephwid.xml from possible locations and from registry as well.

Can refer this article as well: http://www.symantec.com/docs/TECH97626