Computers that are deleted from Active Directory still show up in Endpoint Encryption Management Console

Products

• Endpoint Encryption

Issue/Introduction

When a machine is deleted from Active Directory, it still shows up in the Symantec Endpoint Encryption Management Console. 

Environment

Active Directory Synchronization is configured and enabled

Cause

By default, the Active Directory Synchronization will synchronize objects that have been added to the domain, but will not remove deleted objects. To do this, "Reverse Data Verification" must be enabled.

From the Symantec Endpoint Encryption Installation Guide:

Resolution

Enable Reverse Data Verification

1. Open the "SEEMS Configuration Manager"
2. Expand "Active Directory" tab
3. Go to "Service" tab
4. Place a check in the box for "Enable Reverse Data Verification"