I have AD sync turned on, and for the most part its working just fine.
However, I have about 25+ computers that are on the domain (Windows computers) that are showing up in Default Group and I cannot move them to the correct AD group because you can't move to AD groups.
SEPM syncs with AD so where are these machines showing up in AD?
You should be able to still move them using the MoveClients utility.
They are on AD, I verified that.
I will be unable to use the MoveClient application because when this server was installed 6+ years ago, no one thought about writting down the db password.
I'm currently in the process of migrating to a new server.
I meant, are they in their correct AD group?
In Active Directory, they are in their correct OU's.
But in SEPM, they show up in "Default Group", rather than their correct Symantec-AD/Sync group.
My question is why does this happen with only a handful of computers?
What is the exact SEPm and SEP client versions here?
12.7004.6500
Symantec has a KB article on it which outlines a few key issues:
http://www.symantec.com/docs/TECH147382
Thank you.
Will there be any issues of reconnection if I delete OU's and re-sync it?
I've never seen or had that issue when I worked with AD sync. Should just be as easy as deleting in SEPM and re-adding/synching.
Thank you, I'll ask our SE's to do a snapshot and then do a re-sync