Endpoint Protection

I have an organization with about 100 Windows Vista and Windows 7 workstations.  As we migrate more users to Windows 7 -- by removing old Vista machines and providing new Win 7 machines -- we noticed that the Win 7 machines show up in the SEP management console listing for a day or so and then disappear.  The machines are still receiving AV definition updates and an inspection of the sylink.xml files show they are correctly "pointed" at the SEPM console machine, but they have disappeared from the client listing.  Any suggestions as to how to retain the machines once they are in the console listing?

do you see a green dot on the client?
its most likely that they are changing from computer mode to user mode
search the clients in user mode
in sepm you need to set the display to user mode and computer mode
click on clients tab- on the tasks option you will a display filter to show user mode and also computer mode
now search y our clients in SEPM  , you should find them. 

Good thought, but the filter is set to both user and compute mode.  Yes, the green dot is on the client workstations.  Can I connect directly to the database (embedded, not SQL) to see if they are there?  Maybe that won't tell me anything.  Are there other ways to troubleshoot?
More Info:
Running version 11.0.4 SEPM and the Windows 7 machines have 11.0.5, of course.  I have some Win 7 machines that appear, but most show up upon initial installatin and then disappear.  I'm installing from the management console using the find unmanaged machines, then pushing the deployment from that applet.

 In the client GUI go to Help and support ----->Troubleshooting and check for the server name and group,in the SEPM console of the same server go to that particular group and check whether client is present there..
-------------------------------------------------------------------------------------------------------------------------------------
If above suggestion not helps  please paste the exsecreg from C:\Program Files\Symantec\Symantec Endpoint Protection Manager\data\inbox\log and also the ip address of the client that is not visible in SEPM

A new piece of information...
Seems the client machines that are disappearing were all imaged using a machine that had SEP installed prior to running Microsoft sysprep.  The original machine was joined to the domain, all software installed including SEP and then dis-joined.  Then, the machine was sysprep'd and an image of the hard-drive was taken.  This image was then used to deploy several other machines.  Now every machine from this image exhibits the same behavior; that is, only one machine from the "clone" group shows up in the SEPM console at a time.

We have noted that it appears the last machine to "check in" is the one that appears in the client list in SEPM console.  We took one machine in this group and ran Clean-Wipe from Symantec and then reinstalled SEP as a managed machine, but the same behavior results.  We deleted the SEPM console and associated embedded database, then reinstalled it and waited for machines to check in.  The same behavior resulted.  It appears that SEPM is reading each of these machines as being the same machine.

The question then would be:  What unique identifier was cloned to each of these machines that SEPM console reads and determine all these machines to be the same when they check in?  Is it a registry key, or what?

I think this is the answer I was looking for...

Title: 'Configuring Symantec Endpoint Protection client for deployment as part of a drive image'
Document ID: 2007110510364248
> Web URL: http://service1.symantec.com/support/ent-security.nsf/docid/2007110510364248?Open&seg=ent

 

Yes, that is exactly what you needed.