Endpoint Protection

My clients are switching to Client mode automatically. I don;t know how or why is it happening.

I ran move client utility but the client again start moving to client mode in few days. Also I am having lots of duplicate clients. Why do we get duplicate clients. Is there a way to remove duplicate clients from SEPM.

I am using SEPm Ru6MP3 and SQL 2005 database.

Why do clients go to user mode. I read somewhere that if you add a user then clients go in user mode. How to find that and how to remove that.

I also saw that it has been fixed in Ru7 but I need a workaround.

You might want to check these docs out: Removing duplicate clients from the Symantec Endpoint Protection Manager using the CleanClients tool http://www.symantec.com/docs/TECH97371 Some Symantec Endpoint Protection (SEP) clients switch automatically from "Computer mode" to "User mode" http://www.symantec.com/docs/TECH97888

Does the cleanclients tool work if I have no integration with AD?

Not heard of this tool, is there any description with the tool?

I am not sure this issue has been addressed in RU7, but I know it is fixed in SEP 12.1. If you try to avoid the update, you can create separate SEP domain and make sure computer mode machines stay in one domain and user mode in another, this will avoid the machine switch to user mode or machine mode automatically.

Creating a different domain is not an opion as the clients are form different region with different policies it will make it impossible to manage them.

SEP 12.1 is a plan but I don't see it happening for next 6 months. Till then what to do ?

Cleanclients tool is nothing but a command to be run on SEPM. But description shows it should be run a SEPM where AD is integrated. it is used to remove duplicate clients.

Oh ok, in that case it is going to remove the duplicate entries it will not switch user into computer mode.

There is a bit more information on it here in this doc:

Clients removed by CleanClients are still shown in historical reports

http://www.symantec.com/docs/TECH165005

This is a SEPM side issue so migrating only SEPMs to RU7 will fix this issue.

Or else you can try using Move Client on all groups on all replication partners or use the SwitchUserModetoComputerModeTool

That should fix the issue.