Deregister Inactive Computers
We need the ability to maintain a clean database for a variety of reasons, including, but not exclusive to, sanity, licensing truing, and sanity.
In our environment, all workstations and laptops should have Endpoint Protection (EP) and Cloud Web Gateway (CWG) installed.
If computers have been inactive for 30 or more days for one or both products, they should be moved to an inactive state that does not count against licensing for each respective product. E.g., if a computer is currently reporting into Endpoint Protection, but has not reported into Web Gateway for 31 days, it should be active in EP, but inactive in CWG. Licensing counts should reflect that. As importantly, we should then be able to report on those machines that have one, but not the other, for easy targeting for correction.
Likewise, if computers have been inactive for 30 or more days in all products, they should similarly be moved to inactive state that does not count against licensing in any product. Those computers would not disappear, but would remain in the database for reporting purposes indefinitely. They would, however, not show up on default reports or views - one would have to specify their inclusion in reports.