When Endpoint Protector is installed on a new PC on our network the PC ends up in the "Unassigned" group in SEC. The problem with this, for us, is that you cannot apply policies to that Unassigned group. So EPP gets installed (sometimes by our Users)…