Sophos Central Support - Re-assign sub-estates

Question

Hi, 
 I wanted to move computers in one sub-estate into another. I disabled Tamper Protection and ran the --registeronly command which did work, however it left the computer in both sub-estates and each has different tamper protection codes. I have to do this for over 50 computers and wanted to know if it's a good idea to remove them from the first sub-estate before moving them to the new sub-estate. 
 
 Thanks, 
 Bart

Qoosh · Answer

Hi Bart, 
 If Tamper Protection has already been disabled, it is safe to delete the device from the previous sub-estate. If you run into issues when running the re-register command, you can also find the Tamper Protection password for the deleted device from the menu "Logs & Reports > Recover Tamper Protection passwords". 
 Once the device is registered to the new sub-estate and communicates a policy update, the Tamper Protection password will be updated.

RichardP · Answer

You can use the API documented here to process these transactions including deleting endpoints from the old estate: https://developer.sophos.com/docs/endpoint-v1/1/routes/migrations/post 
 It is not advisable to delete a device from the original estate until it has been migrated.

Sophos Central Support - Re-assign sub-estates

Top Replies