Endpoint Protection

Hi, we have our A/V protect off due to some ongoing issues, but does anyone know why so many units are duplicated entries in the Auto-Protect off report?



We only have 14 units installed... why does it show auto-protect is off on 27 units?



Thanks for any advice/help in cleaning this up.

Dan

 Have any of those computers been moved to a different group within the last 30 days?

If so it is possible that the entry in the other group (that no longer exists) is still being counted due to the way logs are processed.

What I'm doing is, because we have different Policies for each group of computers, we're copying from the AD imported computers to a new group once the newly installed clients get the green dot on the yellow shield.  What it does is it makes a copy of the client in another group, leaving the original behind.  Could this be what is causing duplicate entries?

Hi Dan Which version are you running? Grant-

Hi Grant, we're running 11.0.5002.333.

 That is exactly what is causing the issue. You can't permanently move a client out of an AD sync group.

Additionally AD sync does somewhat cause duplicate entries in SEPM if it is introduced after you already have clients.