Endpoint Protection

 View Only

New SEP agents being moved to default group from preferred group immediately after install

  • 1.  New SEP agents being moved to default group from preferred group immediately after install

    Posted Jan 25, 2019 08:34 AM

    I have a question regarding a new agent install that gets moved from its designated PrefferredGroup to the default group automatically immediately after its registered. This is during a large deployment of over 1000 agents and only a handful of agents are doing this.

     

    The logging in the ersecreg-a.log  shows the agent in the correct preferredgroup at 01/17 11:28:50  after the install

    The next log at 01/17 11:29:55  shows the agent in the default group, and I'm unable to determine what caused this move. 

     

      

    Can someone shed light on what might cause this agent to be moved automatically from one group to another on its own? Or at least point me in the direction to where else I should look? I’m unable to find that smoking gun to the cause.

    I have a Symdiag from the SEP client and the SEPM to examine the logs.

     

    Thank you