Hi,
Please check the following link. You mentioned that you know the machines that have not been upgraded therefore I would request you to note them on an a notepad one by one and save this file. Create a new Installation package and then using the Migration and Deployment Wizard push this package to the desired clients using the list created in the notepad file.
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007111409432848.
Follow these steps to deploy Symantec Endpoint Protection (SEP) to the client computers on your network:
In the Symantec Endpoint Protection Manager Console, under Clients, and View Clients ensure that you have a main Server group in addition to My Company and Default Group.
Create a main Server Group (if necessary) under the My Company group by following these steps:
Right-click My Company.
Click Add Group.
Enter a Group Name for your main group.
Click OK.
Note: If you plan to deploy SEP client to computers running a server operating system, it is suggested that two client groups be created under your main Server Group. One for servers where an Installation Package is deployed that does not include Network Threat Protection (NTP) or Proactive Threat Protection (PTP) and another for clients that uses an Installation Package that may include these features.
Go to Admin> Install Packages and follow these steps to create a custom Install Package:
Select Client Install Settings, and then click Add Client Install Settings.
Enter a Name and optional Description for the custom settings and adjust Client Installation Settings as desired.
Click OK.
Select Client Install Feature Sets, and then click Add Client Install Feature Sets.
Enter a Name and optional Description for the custom Feature Set.
Disable the AntiVirus Email Protection option (suggested). If this Installation package is for deployment to servers, disable the Truscan Proactive Threat Scan and Network Threat Protection options.
Click OK.
Select Client Install Packages.
Click Export Client Install Package
In the "Export folder" field click the Browse button and browse to (or create) a folder to export the installation package to.
In the "Installation Settings and Features" section, pick the customized installation settings and features you created in Step 3 from the drop-down lists.
In the "Policy Settings" section, select the group(s) that you want clients to be added to and ensure that the "Add clients automatically to selected groups" option is enabled.
Adjust other settings as wanted and click OK. A progress indicator appears as your Installation package is created and exported to the designated folder.
After they are created and saved, you are ready to deploy the installation package to your clients. Follow these steps:
Launch the Migration and Deployment Wizard by going to Start > All Programs > Symantec Endpoint Protection Manager > Migration and Deployment Wizard.
Select Next at the "Welcome" screen,
Ensure Deploy the client is enabled and click Next.
Enable the "Select an existing client install package to deploy" option, and then click Finish.
In the "Push Deployment Wizard", click the Browse button.
In the "Browse for Folder" dialog box, navigate to and open the folder that you exported your installation package to in the previous Step 6. Select the subfolder.
Click OK, and then click Next.
In the "Select one or more computers... screen", either:
Click the Add or Import Computer button and select the computers based upon "IP Address" or "Host name." You may also use a text file list that is populated with either Host names or IP Addresses. Format for the name/ip list txt file: 1 value per line, if 2 values are provided on the same line the second value is ignored, values may be a host name or IP address, IP addresses must follow IPv4 addressing.
Or
Drill down into the "Microsoft Windows Network" to Add your workstations to the "Computers to deploy to" pane.
After your workstations are added to the "Computers to deploy" pane, click Finish. A progress indicator appears as the Symantec Endpoint Protection software is deployed.
The Symantec Endpoint Protection software now installs automatically to the workstations.