Endpoint Protection

Hi ,

What is the Best practice for moving from EP Active directory sync to groups without EP losing communication to the manegment?

Thanks

Sabi 

Breaking sync won't kill communication between clients/SEPM. If you break sync, all clients will go to the 'Default' group on the next heartbeat and from there you can move them. I would suggest setting up new groups and applying policies before breaking sync and once that's done you can move them accordingly.

The best practice for creating client group structure is here:

http://www.symantec.com/docs/TECH134409

Thank you Brian :)

it helped me  a lot 

You're welcome. I'm glad it's helpful.

Hi ,

One more question :

does the AD OU will dissapear from the SEPM ?

how can i be shure that i "broke" the sync?

Thanks

You should be able to delete groups and move clients around freely.