I happen to know from Trend Micro OfficeScan that the trick is usually that you install the client in the image then run a tool to delete the identifier on the client.
So if you deploy it it generates a new and unique identifier on each and every workstation. I guess something similar needs to be done for the endpoint client.
But I am a bit weak in my experience with endpoint software and troubleshooting. (it's on my to-do list somewhere.)
<< We make miracles happen while you wait. The impossible jobs take just a wee bit longer. >>