Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 5 replies
  • Subscribers 1 subscriber
  • Views 1733 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SEC 5.1.0.1839 - Endpoints moving groups "on their own"

KarlGillis

Hello All,

I have an issue whereby I have a number of clients checking into the one SEC.  In each client group there are sub-groups (server/workstation).

The issue I am finding is that all of the workstations keep moving back to the root of the client name - anyone ever come across this?

Example:

Customers | Customer1 | Workstations

All machines keep moving from the above group to Customers | Customer1 and therefore the policy keeps changing.

:42217


This thread was automatically locked due to age.
  • 0

    Hello KarlGillis,

    when do these machines "move back" - after a reboot or just out of the blue? And how have they been moved to the Customers | Customer1group in the first place?

    Christian

    :42225
  • 0

    Hi QC,

    I can't confirm but it seems to be mostly upon reboot.  I have moved them back and I am currently monitoring.

    How have they been moved?

    Not sure, I am looking at the Computer Details tab, I can see the machines change from one group to another.

    I am trying to work why and how this is happening, just applied all policies to that group and I am watching to see if any change.

    Not much information to go on just yet I'm afraid!!  So far I have 18 clients, and it is only happneing this particular client.

    KG

    :42227
  • 0

    Hello KG,

    any chance that these machines are somehow reset (the request to be moved is only issued after install)? Guess AD (sync) is not involved.

    Christian 

    :42233
  • 0

    Ooh, you might be on to something there, initiallly the install was pushed out via GPO.

    The client actually had a new DC put in and it looks like all GPO's have been migrated and the installation GPO is enabled.

    This is now disabled and I'll monitor through the day and tomorrow.

    Good man Christian.  I'll let you know the resutl.

    :42239
  • 0

    Christian,

    You hit the nail on the head.  After checking the the GPO, disabling it and rebooting a few machines and monitorign throughout the course of the day yesterday I can confirm that the machines are no longer moving groups.

    Resolution:

    Turn off the forgotten GPO!!

    Thanks,

    KG

    :42277