Currently my action center has three notifications shown in the attachment. However the machine for which all three of these alerts have been generated has since been uninstalled. The most important as admin is of course the spyware detection, I would likely acknowledge/clear the other two alerts but would have to deal with the spyware notification.
However, as far as I can see, as an Admin I have no way of knowing the endpoint has been uninstalled and would currently be trying to deal with the spyware infection on a machine over which I would have no control.
I imagine this could really become a problem if users install the endpoint at home or machines become decommissioned etc.
To summarize:
- How can I tell a machine has been uninstalled?
- Can MCS attempt to send a notification during an uninstall as a form of notification?
- How can I remove decomissioned endpoints from the management of Sophos Cloud?
Thanks,
Luke
