Symantec Endpoint Protection (SEP) Client 14.0 Package is created with a Liveupdate Settings Policy to contact an Internal Liveupdate server for updates.
However, the client still connects to the Symantec Liveupdate Server.
When you move the client to a different client group and then move it back to the client group with the Liveupdate Settings Policy to contact Internal Liveupdate the client does connect to the Internal LiveUpdate server.
Client is installed as an unmanaged client and converted to a managed client with the Client Group settings that contain the Liveupdate Settings Policy.
This issue is fixed in Symantec Endpoint Protection 14.0 RU1 MP1. For information on how to obtain the latest build of Symantec Endpoint Protection, see Download the latest version of Symantec Endpoint Protection.
To workarounds the issue: