For troubleshooting purposes, it can be useful to trap a copy of each outgoing NSE file that the Symantec Management Agent for Windows sends to the Notification Server.
A good resource when troubleshooting client-side issues involving NSEs is the option to capture NSEs as they are sent to the server.
Capture NSEs on the client by:
Analyze what NSEs are being sent from this client machine. To test if the NS is processing them, copy the captured NSE to C:\ProgramData\Symantec\SMP\EventQueue\EvtQFast.
Be sure to remove the value from this registry entry after testing as it will eventually consume significant disk space.