Endpoint Protection

I have a few questions about using User accounts instead of computer accounts in Endpoint.

Is there a way to configure it so that it doesnt show multiple user names every time you log on to a different computer. For instance, lets say you have a company with 200 computers and you have 1 network administrator named "Bob Jones" who logs into multiple computers. Now you will have a LONG list of objects on your management console with "Bob Jones - Computer".

Also, if you have "John Doe" in the group "Desktop" and a specific policy assigned to that group. If John logs in at another computer, will it keep the new object it creates under the "Desktops" group, or will it put it in the default group?

If I need to clarify these questions please let me know.

Thanks.

The policy is applied on the UserName. If the user John Doe logs in Computer A policy will be applied on computer A. At the same time if he logs in on Computer B.Policy will be applied on A and B.

If he logs off a computer A still it will hold John Doe's policy until some other user logs in.

What about not having such a huge list of users if they log into multiple computers?

In that case..The policy will be applied on all the computers in which the user is logged in.

You can keep your clients either in user mode or computer mode.If you keep it in user mose all clients will be grouped with respect to the user logged in.All policies will applied to that PC will be the policies of the group which user belongs.

If you are keeping all your clients in computer mode all the policies which is getting applied to your PC will be same irrespective of the user logged in.In this case you will see only one user in user  in SEPM(Current logged in user)