Workstations Outside the group

Hello everyone I manage the server symantec Endpoint Protection Manager of my company (version 14.2.7700.0000) we have several groups I note each my Workstation each time go out groups that are designated. I need your help