Endpoint Protection

 View Only
  • 1.  SEP and AD

    Posted Sep 10, 2009 04:05 AM
    i have upgrade sep 11 from MR4 MP1a to MR4 MP2. Now I have several clients (especially Windows 2003) that have two entries. One with dot green , one with null. How to remove it ??


  • 2.  RE: SEP and AD

    Posted Sep 10, 2009 04:54 AM
    Hello ekrpin.
    are you see 2 icon in taskbar? near the clock?
    Thanks
    Fatih.


  • 3.  RE: SEP and AD

    Posted Sep 10, 2009 05:10 AM
    Hi Ekrpin,

    SEP 11 MR4 MP2 has the ability to remove duplicate or misplaced clients with a command URL given to the SEPM (Symantec Endpoint Protection Manager) web server. Enter the following URL in a browser on the computer running the SEPM:

    http://127.0.0.1:9090/servlet/ConsoleServlet?ActionType=ConfigServer&action=CleanClients

    After this command it run in a browser window, the following will be displayed:

    <?xml version="1.0" encoding="UTF-8" ?>
    <Response ResponseCode="0" />

    This is not an error message: it is normal.  Checking the SEPM afterwards should show that the duplicates have been cleaned away.

    If additional help is needed, be sure to check back in the forum or contact Technical Support!

    Thanks and best regards,

    Mick

     



  • 4.  RE: SEP and AD

    Posted Sep 10, 2009 06:24 AM
    i have to use the link but not clear/remove duplicate client. when open sep manager and re-sync to AD , i have yet two entry, one with dot and one without. the unique ID are different.


  • 5.  RE: SEP and AD
    Best Answer

    Posted Sep 10, 2009 08:44 AM
    Hi Ekrpic,

    I think the link will be crucial to resolve your issue, as it specific to remove the duplicate entries in the SEPM database:
    http://127.0.0.1:9090/servlet/ConsoleServlet?ActionType=ConfigServer&action=CleanClients

    Best,
    Aniket


  • 6.  RE: SEP and AD

    Posted Sep 10, 2009 10:33 AM

    I glad I stumbled across this solution to a problem that has bugged me for a while. It worked as advertised. Thanks Aniket



  • 7.  RE: SEP and AD

    Posted Sep 11, 2009 10:30 AM
    Ekrpic, welcome to the "AD problems" club :P

    The link both Aniket and Mick posted will work only for duplicated computers that appear on the Default group.
    Duplicated computers inside the same OU still doesn't have a solution. I've searched and discussed a lot about it too.

    A thread about this problem. Read specially the last posts: https://www-secure.symantec.com/connect/forums/ad-integration-sep-groups-computers-moving-themselves-around
    My idea: https://www-secure.symantec.com/connect/idea/better-active-directory-computer-accounts-synchronization

    I hope this problem will be finally solved at RU5 (aka MR5)



  • 8.  RE: SEP and AD

    Posted Sep 15, 2009 11:29 AM

    thanks for the info ... I guess we have no choice seeing that Symantec is yet again taking their time getting these problems looked after.


  • 9.  RE: SEP and AD

    Posted Oct 28, 2009 01:33 PM

    I ran the command below in the browser on the SEPM server :

    http://127.0.0.1:9090/servlet/ConsoleServlet?ActionType=ConfigServer&action=CleanClients

    It displayed the following, but duplicates are still there.  I'm running V.11.0.5002.333

    <?xml version="1.0" encoding="UTF-8" ?>
    <Response ResponseCode="0" />