Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

move endpoints to different sub-estate

We migrated from on premises SEC to Sophos Central in 2016 before sub-estates existed in Central.  We now have enabled the new Central Enterprise console + master licensing and the original Central account has become a sub estate.  Another new sub estate has been created for IT staff at one of our business units which currently has no devices.  How can I move their 75 desktops and servers from the original account's sub estate to their new sub estate?

edit: I would also like to know how to copy existing policies, website settings, tag lists between sub estates so we're not reinventing the wheel with each one.



This thread was automatically locked due to age.
Parents
  • Hi,

    Currently it is not possible to import policies and settings from On prem Manager (SEC) to Central. Moving clients from SEC to Central is possible, but keeping the exact structure (Sub estates, sub domains, or even groups) is not possible. However Installer package from each sub estate in Sophos Central can get the endpoints on which it is used to communicate the specific sub estate.

    Regards,

    Gowtham Mani
    Community Support Engineer | Sophos Technical Support

    Knowledge Base  |  @SophosSupport | Sign up for SMS Alerts
    If a post solves your question use the 'This helped me' link.

  • my question was regarding migrating those items from one Sophos Central sub estate everything is on to a newly created Sophos Central sub estate both under the same Sophos Central Enterprise account with shared licensing.

  • As far as i know, this is not "quite easy" possible. There are certain attempts to do it, but those scripts can break everything. 

    The Endpoint as several "pointer" and it is not quite easy to move the Endpoint (local) to another Central Admin Instance. 

    The other point is, it is not quite easy to move a existing Endpoint from Central perspective to another central Instance. 

     

    So the official answer by myself would be - No.

    If you have a enterprise level environment, you could talk to Professional Service. 

     

    In smaller Instances, you can simply "overwrite" the installation by the other Sophos Endpoint installer. Keep in Mind, you need to disable temper protection.  

    __________________________________________________________________________________________________________________

  • Hi,

    so you mean for small installations (<100) I can move the license to a new created sub-estate (via support/ticket) and from there, reinstall the clients?

  • You could work with the Enterprise Dashboard in some weird way yes. 

    https://community.sophos.com/kb/en-us/127594

    https://community.sophos.com/kb/en-us/126485

    Its called Master License. Could work for your Case.

    https://community.sophos.com/kb/en-us/127329

     

    But i would highly recommend to not "abuse" the Enterprise Dashboard for such scenarios. This Dashboard is not build to workaround license issues. 

    __________________________________________________________________________________________________________________

  • I think it's about time Sophos tried to sort this one out - we have several sub-estates for various sites and staff do occasionally move from one location to another. 

    It's just a pain having to uninstall the client and re-install it again. 

     

  • Hello  

    If you would need to re-register an endpoint from one Central account or sub-estate, to another, you may follow the steps below:

    1. Disable Tamper Protection
    2. Download the Endpoint installer from the correct (destination) Sophos Central Instance.
    3. From a command prompt opened to where SophosSetup.exe was downloaded to, run: SophosSetup.exe --registeronly
    4. Enable Tamper Protection again

    If the steps above will not work, uninstalling and re-installing using the installer file downloaded from the correct (destination) Central account will need to be done.

  • Thanks, but that's not really a solution if we wanted to move say 10 or 20 or even 100 people from one location to another. 

    We discovered that this was the only way to resolve the problem, but it's not ideal and not really scriptable either. 

     

    It needs a better solution

Reply
  • Thanks, but that's not really a solution if we wanted to move say 10 or 20 or even 100 people from one location to another. 

    We discovered that this was the only way to resolve the problem, but it's not ideal and not really scriptable either. 

     

    It needs a better solution

Children