Endpoint Protection

I hope some one can help me with a issue I am having with SEP.

I am running SEP 11.0.4000.2295 on a windows 2003 server

My client installs have not been showing up under the Management console. When I dug deeper I could see that the clients would show up but under user mode. We deploy SEP client using an exported install package MSI through group policy. The settings for the package are set to computer and nothing has changed in our environment on the client side or the management side.

Anyone else see this issue?

Are you installing as a workgroup user?

The readme for MR4 states "That behavior is as designed if installing as a workgroup user, but registration now ensures that it does not accidentally change an entry from computer mode to user mode."

Fix ID: 1421859

http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/2c62c4ee0e697aae882573b000034ded?OpenDocument

Hi brydk2,

Registration is fairly complex and clients can register in User mode due to a couple of reasons.  Workgroup (rather than domain) membership is one.  I understand that another is if the same username is being used all throughout your organization (everyone logging is as the domain's Administrator, for instance, or a similar account used over and over again.) 

Try deleting the user mode clients and seeing if they register back in computer mode.  If that does not work, I recommend contacting technical support: they will be able to check a few things about your environment and may know a way to switch everyone over to computer mode swiftly.

Thanks and best regards,

Mick

 

Check this tool..
https://www-secure.symantec.com/connect/downloads/move-clients-groups-based-ip-and-switch-usermode-computer-mode

I hope this is useful :)

We found that if an administrator changes a single client to User Mode, all subsequent GPO or SMS installs progress in User Mode, with the client joining the group where the error was made. Having all clients look to a tail-site for updates duringa big deployment can completely cripple the WAN! We do not use User Mode but I understand SEPM recognises the underlying System account at each install as the User which has been tagged for User Mode. The solution is to catch every last User-Mode client and switch it back to Computer mode.

We faced the same problem at the time of implementation...
The script was use full, so i have posted it in my download section... you have to run switchusermodetocompmodetool.bat once it will change user mode client to computer mode...
Mode change and group shifting problem of clients reduced after running it on all servers..... 

REF:https://www-secure.symantec.com/connect/downloads/move-clients-groups-based-ip-and-switch-usermode-computer-mode