If you go to edit a computer in endpoint protection, the Group defaults to the first on the list, NOT the group the computer is currently a member of. (Normally in Astaro, if you edit something it keeps the current settings in dialog boxes).
(This could lead to accidently saving computers to incorrect Groups).