KNOWN ISSUE: 'Devices' view in Activity Center still shows a client in the (IsManaged='1') search filter even after uninstalling the Symantec Management Agent (AexNSAgent.exe).

Article:TECH177148  |  Created: 2011-12-16  |  Updated: 2013-10-24  |  Article URL http://www.symantec.com/docs/TECH177148
NOTE: If you are experiencing this particular known issue, we recommend that you Subscribe to receive email notification each time this article is updated. Subscribers will be the first to learn about any releases, status changes, workarounds or decisions made.
Article Type
Technical Solution


Issue



After manually uninstalling the ‘AexNSAgent.exe’ from a discovered and previously manageable client system, the computer is still viewed in 'Activity Center' under devices with an 'Installed Agent'

The filter, (IsManaged='1') is used to filter computers and as seen on the attached screenshots, the computers with the AexNSAgent uninstalled are still listed. 

Creating a filter set to, (IsActive='1') will STILL show the clients that have had their AexNSAgent.exe files uninstalled.

Note: This is also happening even after sending the uninstall policy out the agents from the SMP console as well.

EXPECTED RESULTS:

If the AexNSAgent.exe file is uninstalled from the managed client, an (IsManaged='0') switch should be sent to the Notification Server to indicate it is no longer being managed. This should be reflected in both Activity Center and First Time Setup.


Environment



ITMS 7.1 SP2 and prior


Cause



Known Issue. Symantec Management Agent (SMA or Altiris Agent) does not send any inventory information while uninstall of the agent itself. Only sub-agents (plug-ins) send the inventory information, using the agent which is still exist.
This was a design restriction, since the client-side uninstall could be performed when no NS connection is available. In that case we can't send the inventory neither postpone the uninstall process.


Solution



This issue has been fixed with the ITMS 7.5 release. With the ITMS 7.5 implementation, AeXNSAgent.exe is now sending the "Uninstall" event with "Success" status stored in "Evt_AeX_Push_Status" dataclass. Also a new NSMessage (AgentUninstallMessage) is posted on the SMP server when such event is received. 

SMP server has code which manages IsManaged Flag based on the data presence in the "Inv_Aex_Ac_Client_Agent" dataclass. If data is present then the client machine is set to be Managed. Otherwise unmanaged. Upon uninstall we clear the mentioned dataclass data. Inventory event is being sent with empty "AeX AC Client Agent" data class, in order to switch IsManaged to False. After uninstalling the Symantec MAnagement Agent (SMA), the client computer will be placed to "Unmanaged computers" list in First Time Setup page. 
Computers with the SMA installed will be placed to "Management Agent installed" list. When opening "Discovered Computers" list you will see all the discovered machines there, computers where SMA installed will have an icon.  


Supplemental Materials

SourceETrack
Value2568152


Article URL http://www.symantec.com/docs/TECH177148


Terms of use for this information are found in Legal Notices