Hello all , I have created two brand new groups which contains no computers and has default set of polices applied but the strange thing which I am seeing is that the policy serial number of that group is blank -. Even when I used a single computer to this group the policy serial number was still blank.

Secodly I am using device blocking that is blocking USB's, Imaging devices, printers and I have a USB Biometric device which I have added in exclusions by its device ID along with human interface devices , but the device is still blocked even though its Device ID is in exclusion.

Secondly when I make changes in the device policy i.e add/remove devices from blocking list or exlcusion list then the policy serial number of the asspociated group is not chaging , why is that ? regards

What version? Does it change if you make a change to other groups?

Restart the SEPM service

http://www.symantec.com/docs/TECH173941

That group is not created in agent/outbox thats why you dont see them, delete those groups and create  a new one.or restart sepm service

Policy serial numbers do not get updated/created unless the SEPM service is restarted

http://www.symantec.com/business/support/index?page=content&id=TECH173941

SEPM version is 12.1.4 James, Rafeeq if I move the client to this group even the clients keeps the old policy serial number

Yea because the new group doesn't have a policy it can apply. Restart the SEPM service

Well James  basically I have another group which has device control policy applied. I made few changs added/removed devices in blocked and exluded list even the serial number of that particular group didnt change, why is that ?

I'm Brian

Restart the SEPM service. Per the link, Symantec is aware and investigating.

Please restart SEPM and check the agent/outbox folder, it should have populated with the serial group info