move endpoints to different sub-estate

Hi,

Currently it is not possible to import policies and settings from On prem Manager (SEC) to Central. Moving clients from SEC to Central is possible, but keeping the exact structure (Sub estates, sub domains, or even groups) is not possible. However Installer package from each sub estate in Sophos Central can get the endpoints on which it is used to communicate the specific sub estate.

my question was regarding migrating those items from one Sophos Central sub estate everything is on to a newly created Sophos Central sub estate both under the same Sophos Central Enterprise account with shared licensing.

Any solution here?

As far as i know, this is not "quite easy" possible. There are certain attempts to do it, but those scripts can break everything. 

The Endpoint as several "pointer" and it is not quite easy to move the Endpoint (local) to another Central Admin Instance. 

The other point is, it is not quite easy to move a existing Endpoint from Central perspective to another central Instance. 

So the official answer by myself would be - No.

If you have a enterprise level environment, you could talk to Professional Service. 

In smaller Instances, you can simply "overwrite" the installation by the other Sophos Endpoint installer. Keep in Mind, you need to disable temper protection.  

Hi,

so you mean for small installations (<100) I can move the license to a new created sub-estate (via support/ticket) and from there, reinstall the clients?

You could work with the Enterprise Dashboard in some weird way yes. 

https://community.sophos.com/kb/en-us/127594

https://community.sophos.com/kb/en-us/126485

Its called Master License. Could work for your Case.

https://community.sophos.com/kb/en-us/127329

But i would highly recommend to not "abuse" the Enterprise Dashboard for such scenarios. This Dashboard is not build to workaround license issues. 

I think it's about time Sophos tried to sort this one out - we have several sub-estates for various sites and staff do occasionally move from one location to another. 

It's just a pain having to uninstall the client and re-install it again. 

Hello SimonGoode 

If you would need to re-register an endpoint from one Central account or sub-estate, to another, you may follow the steps below:

1. Disable Tamper Protection
2. Download the Endpoint installer from the correct (destination) Sophos Central Instance.
3. From a command prompt opened to where SophosSetup.exe was downloaded to, run: SophosSetup.exe --registeronly
4. Enable Tamper Protection again

If the steps above will not work, uninstalling and re-installing using the installer file downloaded from the correct (destination) Central account will need to be done.

Thanks, but that's not really a solution if we wanted to move say 10 or 20 or even 100 people from one location to another. 

We discovered that this was the only way to resolve the problem, but it's not ideal and not really scriptable either. 

It needs a better solution

Thanks, but that's not really a solution if we wanted to move say 10 or 20 or even 100 people from one location to another. 

We discovered that this was the only way to resolve the problem, but it's not ideal and not really scriptable either. 

It needs a better solution

Hello SimonGoode 

I understand. Moving across different sub-estates does affect licensing, as LuCar Toni mentioned briefly in a previous response. I agree that there ought to be a simpler way, especially in large organizations where people move within a lot.

Please, if you have not, submit a product enhancement through https://ideas.sophos.com/ or vote on an existing idea.

https://ideas.sophos.com/forums/428821-sophos-central/suggestions/36868030-need-to-move-endpoints-between-sub-estates

Hi onward 

The development team will take it into the consideration once it has a certain number of votes.