Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 1 subscriber
  • Views 13212 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Restoring a computer after (accidental) removal from Enterprise Console

David_Tomic

Short version:

If a managed computer gets (accidentally) deleted from the Enterprise Console, what's the quickest/easiest way to get it displaying/reporting properly again?

I was actually hoping that it would just get added back in automatically (perhaps the next time the client computer updates), but that doesn't seem to be the case from my testing?

I've even tried adding the computer back in manually (through various methods), but it still won't report it as being connected/online.

So far, the only way I've managed to get it reporting properly is to completely reinstall the entire Sophos Endpoint application again.

Is this actually the expected behaviour, or should there be a quicker/simpler way of getting the client reporting properly again?

:52497


This thread was automatically locked due to age.
  • 0

    Hi,

    When you delete a computer via the console, it's only really hiding it.  The computer remains in the same group and therefore with the same set of policies linked.

    It was my understading that on the next status message it would re-appear.  You can generate a status message by restarting the "Sophos Agent" service on the client and waiting 20 seconds.  Waiting for an ide update would also do it.

    Failing that, in the database set the "deleted" column for the computer record to 0 from 1.

    For example:

    sqlcmd -E -S .\sophos -d sophos521 -Q "Update ComputersAndDeletedComputers SET deleted = 0 where name='computername'"

    Note: This assumes a local SQL Server instance called Sophos (.\sophos) and SEC 5.2.1 or later console (SOPHOS521).

    Regards,

    Jak

    :52499