Curious as to what makes a RSD go to the uninstall section?
Rogue System Detection > Rogue System Sensors > Uninstalled
looking at a machine that I just installed a RSD yesterday shows in this uninstalled page. When I click on the sensor info it says status is unknown. Yet the machine is managed. What are the conditions that make a sensor go to unknown. Because seems like everyday I have more uninstalled ones. They go to active them right to uninstalled.
I've had this but it's only because i'm in the middle of migrating machines from one ePO server to a new one.
All RSD Sensor installs that have been redeployed on the new ePO server are now marked as uninstalled on the old ePO server, which is what i would have expected.
Also what type of computers are the Sensor being installed on? There not at the end of VPN tunnels or anything 'funky' like that?
I would expect that as well. but this is a brand new install from when I first reported this and they are still doing it. Most of the sensors are put on servers but a few are on desktops. But on desktops that I woudl expect to be on everyday.
You may also check if there is any RSD uninstallation task assigned for the affected machine from epo console.
If there is no such task, you may get some clue from the following sensor logs.
RSDSensor_out.log (Program Files\McAfee\RSD Sensor)
there are no uninstalls and no logs pertaining to the Sensor in the %temp%\McAfeeLogs folder. I did look at the RSDSensor_out.log and it doesn't show anything but throttle messages and then http 200 success every 5 mintes due to the throttling. But I see the GUID has changed on some Agents. Why do they change out of the blue?