Hi,
Possible Cause:The user account used to install SEP existed already in SEM_Client table as a user mode record for some reason.
Possible Solution
1. Remove all entries in user mode from DB if user mode is NOT intended in environment at all.
delete from sem_client where policy_mode = 0
or
2. Use a switch tool to switch all user mode clients to computer mode.
or
3. Use a new user account that never used for SEP installation.
The entire process of choosing which group a client belongs to occurs during client registration
1) Client forwards SEPM Domain ID, Computer Name, Computer Domain Name, User Name, User Domain Name, Hardware Key, Preferred Mode, and Preferred Group SEPM.
2) SEPM then queries SEM_CLIENT table for any non-deleted Computer Mode record (policy_mode = 1) that matches the SEPM Domain and Hardware Key that were forwarded by the client. If a match is found, it means the client has already been registered with the SEPM in Computer Mode. The group id of the client entry is then returned to the SEP client. If no match is found, go to step 3.
3) SEPM queries SEM_CLIENT table for non-deleted Computer Mode records that match the SEPM Domain, Computer Name and Computer Domain that also have no defined Hardware Key. If a match is found, it means that the SEPM client entry was either imported from AD or was created by clicking Add Computer Account in the SEPM console. The group id associated with this client entry is returned to the SEP client. If no match is found, go to step 4.
4) SEPM queries SEM_CLIENT table for non-deleted User Mode records (policy_mode = 0) that match SEPM Domain, Hardware Key, User Name and User Domain that were forwarded by the client. If a match is found, it means the client has already been registered with the SEPM in User Mode. The group id of the client entry is then returned to the SEP client. If no match is found, go to step 5
5) SEPM queries SEM_CLIENT table for non-deleted User Mode records that match SEPM Domain, User Name and User Domain and no defined Hardware Key. If a match is found, it means the SEPM client entry was either imported from AD or was created by clicking Add User Account in the SEPM console or the user logged on to another computer before. The group id associated with this client entry is returned to the SEP client.