After upgrading to Symantec Endpoint Protection (SEP) 12.1 RU1, workstations are receiving new hardware IDs periodically. This results in multiple entries for each workstation in the clients list, with all but the latest reporting "offline"
All affected clients are virtual machines, but the customer has not deployed RU1 to physical hardware yet so it is not known whether the issue extends to non-VMs. The SEP Support Tool indicates that the virtualization method in use is Microsoft Virtual PC.
This issue is resolved in the current build of Symantec Endpoint Protection. See the following documentation:
New fixes and features in Symantec Endpoint Protection 12.1 Release Update 1 Maintenance Patch 1
Article:TECH187656 | Created: 2012-04-27 | Updated: 2012-04-30 | Article URL http://www.symantec.com/docs/TECH187656
Migration from SEP 11.0 to 12.1, or repairing a SEP 12.1 client, results in duplicate client entries if the client is a Hyper-V guest OS
Fix ID: 2477905
Symptom: Migrating a client from SEP 11.0 to 12.1 results in a duplicate client entry in the SEPM console if the client is a Hyper-V guest OS. This issue can also occur if a SEP 12.1 client is repaired via the add/remove control panel, if the client is a Hyper-V guest OS.
Solution: The SEP client installer was modified to prevent a condition where the hardware ID is re-generated, resulting in a duplicate client entry.
Symantec Endpoint Protection 12.1 RU1