Endpoint Protection

Hello Everybody.

I have to deal with a scenario which is the following:

We have a SEP Manager (11.0.4) with almost 4000-5000 clients. Many of them have been switched to user mode despite the fact that were initially installed in computer mode. The problem is that there is an integration with 3 LDAP servers.

I have to mention that neither users neither groups were imported from Active directory. The users have sep manager authentication and nothing in the SEP Manager was imported from Active Directory. But it synchronizes every 24 hours with LDAP.

I have opened a support case with Symantec and they informed me that there is no way to switch clients to computer mode because of the LDAP integration. In addition to this, they mentioned that if we stop the integration with LDAP, all policies will get lost and all clients will be reporting to default group. Is this true? Can this happen?

Please advise in order to proceed.

Finally, there is a scenario of migration to a new machine and upgrade to 12.1. Will this upgrade solve the issue and how?

Best regards,

Are you able to see the same group structure in SEPM now? If yes, remove LDAP integration. If you do this there is a high possibility of clients getting moved to default group. If happen so, you can still move back the clients to respective groups. (There is a script also available for this). Then all your clients will have same old policy.

Hi,

The groups were not imported from AD. Nothing was imported from AD. So, why the clients have to be moved to default group?

As per theory, should not happen. But in practice it may happen.

I believe this is a known issue which is fixed in 12.1