Endpoint Protection

 View Only
  • 1.  Clients showing up as usermode on the backend

    Posted Sep 02, 2015 10:39 AM

    Hello,

    Can someone point me how to troubleshoot clients showing up on the backend automatically as user mode? Isn't the default mode computer unless you specifically switch it in SEPM?

     

    Update: I tried removing and re-installing the agent with added PreferredMode="1" PreferredGroup="GroupA" in sylink.xml

    That key (PreferredMode) is not in the registry. What is in the registry is PreferredGroup="GroupA", however on SEPM it shows a different group (client is in GroupB), and yes the client is back in usermode. The changes done on the client side have no effect.



  • 2.  RE: Clients showing up as usermode on the backend

    Posted Sep 02, 2015 11:59 AM

    Yes, default mode is computer.

    If you right click the client and set it to computer mode, does it take affect?

    Also, what version of SEP is this?



  • 3.  RE: Clients showing up as usermode on the backend

    Posted Sep 02, 2015 12:06 PM

    More information about it can be found in the below article:

    http://www.symantec.com/docs/TECH157429

     

    As far as why this is happening: I'm afraid it's not all that simple as it's been happening off and on across a number of different versions of SEP.  A selection of similar articles can be found below.  Perhaps one of these matches you scenario?

    http://www.symantec.com/docs/TECH97888
    http://www.symantec.com/docs/TECH202208

    As a bit of background info, the below article describes the conditions required for a mode change,  Maybe this will help you narrow down the cause:

    http://www.symantec.com/docs/TECH147033



  • 4.  RE: Clients showing up as usermode on the backend

    Posted Sep 02, 2015 01:22 PM

    Thanks those links are helpful. Still trying to fix it...



  • 5.  RE: Clients showing up as usermode on the backend

    Posted Sep 02, 2015 01:37 PM

    This is an older 5.1 SEPM, yes, I know it's not supported anymore. But I'm looking to fix it. Currently the only way is to manually switch the client.

    I confirme this by deleting the entry in SEPM, made sure it's not in User or computer mode. And as soon as I re-install the agent, jumps to GroupB and in usermode. It's happening to all new or old builds.

     

    Edit: Is there a debug log I can run on the backend to look at what's causing this behaviour?



  • 6.  RE: Clients showing up as usermode on the backend

    Posted Sep 03, 2015 01:04 AM

    Refer to the article at the following link on how to switch clients from user mode to computer mode.
    How to use the MoveClient Utility to switch multiple machines between computer and user mode
    http://www.symantec.com/docs/TECH157429


    Using the  "Moveclient" utililty switch "ALL" the clients in SEPM to computer mode. Make sure that you do not leave any group left behind with clinets in user mode. Make sure that you do not uninstall and reinstall SEP on existing clients before they communicate to SEPM atleast once after switching them to computer mode.

    For new installations, only use a package that you exported with "computer mode" settings.