I'm working with multiple departments, each of which have their own client groups in the SEP Management Console. The admins don't have access to view the other client groups to move clients to the proper group. To get the clients on the right version of SEP as well as in the right groups we created specific "setup.exe" files for each group. Since the PCs they get come with SEP installed they uninstall the existing client and reinstall with the one that is supposed to move it to the right client group.
================
PROBLEM === The limited admins who are managing the [Laptop Group] can't move their endpoints to the right group ,[Laptop Group], because they are in the desktops group when they are imaged. So they uninstall and reinstall SEP with a "setup.exe" for the [Laptops Group]. When the SEP client is reinstalled it continues to report to the [Desktops Group]. Since the access is restricted to the admins they can't view clients in the other groups and move them to the right group.
We are currently asking the admins for each group to tell the full admins what PCs need to be moved and to what group. This current format is not easily manageable because we are working with hundreds of endpoints.
================
ASSUMPTIONS ==
- Please assume that the limited admins for the [Desktop Group] and [Laptop Group] will never be able to see the other's group due to security and quality restrictions.
- All PCs are defaulting to the [Desktops Group]; and the [Laptop Group] admins are being challenged because they can't see their clients when they are installed and rely on the SEP team to move clients.
================
Is there a better way to approach this because uninstalling/reinstalling with the client group's installer isn't working? SylinkDrop doesn't move the clients either. The only way we can get them to move is to have a Full Admin do it within the SEPM console since the Limited Admins don't have enough visibility.
I'll use an example below.
==========
[My Company]
- [Desktops Group]
- [Laptops Group]
==========
** The [Desktops Group] and [Laptops Group] are arbitrary for this example. If it helps, think of them as Manufacturing vs. Sales or something along those lines.