Endpoint Protection

Hello Everyone,

We are currently experincing a challenge within SEPM with a number of clients that are showing up in multiple locations.  One being in the AD category for where that client is located.  The other location is in the default group.  The ones that are showing up in the AD categories are showing up as not communicating with SEPM and the one in the default group are showing up as communicating.  When I try to move the client from the default group to the AD group I get the following  error:

Console Error:  The client cannot be moved to the Active Directory Group

What I do know is that there was a reinstall of SEP on the client machines as they were no longer communicating to SEPM, and those clients are the same ones that are appearing in multiple locations.  I am thinking that this is what is accounting for the duplicates being seen, however I am not sure on how to remedy the challenge of the same client in multiple locations.

My apologies if I am a little vague on a few things.  The person who used to do this has recently left without training anyone else on how to use SEPM, so I am trying to learn how use it.

We are currently using SEPM  v11.0.3001.2224

Thank you, for your help

just run these commands on browser should delete duplicate clients.
http://stage-community.symantec.com/connect/forums/duplicate-ad-imported-clients-ru5

If possible upgrade to RU5

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2009090313483348

I ran the following link http://127.0.0.1:9090/servlet/ConsoleServlet?ActionType=ConfigServer&action=CleanClients however I am still seeing the client in the default group and in the AD category.

Upgrading to RU5 is not possible at this time.  The earliest I can get the request out there will be about 2 months after I gather the appropriate documenation as wells as Pros and Cons and go through the appropriate channels.

Delete and re-import the AD Structure.

In order for me to do this I will need to gather a list of Pros and Cons for deleting and reimporting the AD structure.  Do you know where I could find documentation or where would be a good place to start.

Check these
https://www-secure.symantec.com/connect/forums/question-about-deleting-ad-structure-sepm-11#comment-2843971

https://www-secure.symantec.com/connect/forums/some-managed-clients-stuck-default-group#comment-3150301

 However till MR3 it was also a lnown issue which was fixed in Mr4

Symantec Endpoint Protection Manager does not accurately list Active Directory OU members - Duplicate Clients in temp and OU groups.
Fix ID: 1410087
Symptom: Duplicate entries appear in temporary group and also in OU group.
Solution: Improved and optimized the replication process which handles finding and reporting the duplicate Computer Mode and User Mode entries. 

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007121216360648

Thank you very much.