I have mcafee agent installed as VDI==yes for gold image. every VM is booting from it.
so system tree sorting is disabled in server setting. also disabled for endpoint. there is no sorting critiria but some of them keep showing in lost&found group and sorting status is enabled......some time there are two exact same instances of the endpoints with different agent guid show up in both lost&found and VDI system tree group.
There are more than 1000 VMs and every time when user boot up an image, a 'started enable mode' event is logged. I tried excluding the event in the filtering but doesn't seem to work.