KNOWN ISSUE: 'Devices' view in Activity Center still shows a client in the (IsManaged='1') search filter even after uninstalling the Symantec Management Agent (AexNSAgent.exe).

Article:TECH177148  |  Created: 2011-12-16  |  Updated: 2013-10-24  |  Article URL
NOTE: If you are experiencing this particular known issue, we recommend that you Subscribe to receive email notification each time this article is updated. Subscribers will be the first to learn about any releases, status changes, workarounds or decisions made.
Article Type
Technical Solution


After manually uninstalling the ‘AexNSAgent.exe’ from a discovered and previously manageable client system, the computer is still viewed in 'Activity Center' under devices with an 'Installed Agent'

The filter, (IsManaged='1') is used to filter computers and as seen on the attached screenshots, the computers with the AexNSAgent uninstalled are still listed. 

Creating a filter set to, (IsActive='1') will STILL show the clients that have had their AexNSAgent.exe files uninstalled.

Note: This is also happening even after sending the uninstall policy out the agents from the SMP console as well.


If the AexNSAgent.exe file is uninstalled from the managed client, an (IsManaged='0') switch should be sent to the Notification Server to indicate it is no longer being managed. This should be reflected in both Activity Center and First Time Setup.


ITMS 7.1 SP2 and prior


Known Issue. Symantec Management Agent (SMA or Altiris Agent) does not send any inventory information while uninstall of the agent itself. Only sub-agents (plug-ins) send the inventory information, using the agent which is still exist.
This was a design restriction, since the client-side uninstall could be performed when no NS connection is available. In that case we can't send the inventory neither postpone the uninstall process.


This issue has been fixed with the ITMS 7.5 release. With the ITMS 7.5 implementation, AeXNSAgent.exe is now sending the "Uninstall" event with "Success" status stored in "Evt_AeX_Push_Status" dataclass. Also a new NSMessage (AgentUninstallMessage) is posted on the SMP server when such event is received. 

SMP server has code which manages IsManaged Flag based on the data presence in the "Inv_Aex_Ac_Client_Agent" dataclass. If data is present then the client machine is set to be Managed. Otherwise unmanaged. Upon uninstall we clear the mentioned dataclass data. Inventory event is being sent with empty "AeX AC Client Agent" data class, in order to switch IsManaged to False. After uninstalling the Symantec MAnagement Agent (SMA), the client computer will be placed to "Unmanaged computers" list in First Time Setup page. 
Computers with the SMA installed will be placed to "Management Agent installed" list. When opening "Discovered Computers" list you will see all the discovered machines there, computers where SMA installed will have an icon.  

Supplemental Materials


Article URL

Terms of use for this information are found in Legal Notices