I use a network monitoring software that can scan Windows clients via WMI to list installed apps and their versions. I have a mixed environment, and some of my XP Pro SP3 systems do not display the correct version.
The system correctly identifies the Symantec Endpoint Protection client and the current version for software, but when reading the WMI data for Security Center's Antivirus Version, it shows a completely different version.
1. Confirmation.
Using wbemtest, navigating to SecurityCenter, it lists the installation and under the versionNumber property, it shows CIM_STRING 12.1.0.0 instead of the installed 12.1.6x. Other XP systems report other versions (but not the correct ones), and Windows 7 versions are reporting correctly via WMI.
2. Troubleshooting:
2.1 Deleted the entry for the antivirus product using wbemtest. Rebooted, and it again shows the incorrect version.
2.2 Uninstalled SEP client, rebooted system, and ran cleanwipe utility. Verified system is clean and no AV product detected via WMI.
2.3 Redeployed SEP client, rebooted system, and it still shows incorrect version via WMI.
My question is: why are some of my endpoints not displaying the correct version under AntivirusProduct version in the Security Center, but it does show the correct version under installed programs? How can this be resolved so it shows the correct version without manually editing it?