Endpoint Protection

So, we recently rolled out several new computers on our network, and now we're getting an Over-Deployed warning.  We're currently synced with Active Directory so we're unable to remove the clients from the Manager directly, and deleting the computers from the Active Directory is out of the question.  I've already updated the time period to remove old clients from the network from 10 days to 3, but it appears that change hasn't applied yet, as some of the clients that are almost a week old and off the network are still listed.

What I'd like to do is force the SEPM to poll the network and delete any clients that meet the new timing window, if that's possible

There is no method to do this with OU synced groups. You would need to submit a Feature Request for something possibly to be added in the future.

Note: Clients that have been imported from Active Directory cannot be deleted using the above method, those clients will need to be deleted from Active Directory and then synced with SEPM in order for the clients to be removed. It will take approximately 45 days for the decommissioned clients to drop out all of the reports.