When using an agent deployment package which is configured to prompt user for machine ID, user is able to create a sub-group by entering a period in the machine name. For example entering ws1.client will create a machine ID called ws1 in a sub-group called "client" under the group the package is pointing to.
How can this be prevented?
"Allow automatic account creation for groups without a policy" is checked under System tab > Check-in Policy (this is the default setting)
Uncheck this setting to prevent auto-creation of groups. This will mean any group will need to be created within the VSA interface by an admin account with sufficient function access.