Delete an Endpoint for a PC that is no longer Managed

[jwilliamson]

We have a few Windows PCs from a previous customer that still have AMP/Secure Endpoint installed and continue to check in to the console.  We no longer have access to these devices.  We have tried to delete, but they keep coming back in to the console.

Any suggestions for removing completely?  

[David Janulik]

This is a known issue. Once you loose physical access to unmanaged devices, those zombie objects just eating the licence seats. You might set up the policy in the way, that makes the endpoint heavily scanned, or even move the zombie objects to isolated group, and set policy to isolate endpoints. Once you observe Secure endpoint was uninstalled, you can delete via API or manually from the Console.

[jwilliamson]

Thanks.  I did create a highly restrictive BLOCK policy.  So hopefully the client identifies these an having issues and removes them.