The Symantec Endpoint Protection (SEP) client reverts to the default group in the Symantec Endpoint Protection Manager (SEPM) console.
After changing the client group setting in the SEPM, after a period of time, the the SEP client will revert to the default group again.
The cause for this behavior is that the SEP client has a setting of a Preferred Group, "test_group" for example. And this group is not present in the database.
The Preferred Group info is stored in these files:
These files are located in the folder:
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec Endpoint Protection\CurrentVersion\Data\Config
To resolve this behavior:
Locate a SEP client in the same group that does not have the jump group issue.
Copy the above listed three files to replaces the ones in the SEP clients that are moving to the default group.
How to replace the three files:
1. smc -stop
2. Replaces the three files
3. smc -start
Symantec Endpoint Protection 12.1 RU1.