Deleting a computer from the cloud interface should leave a tiny db entry behind so that if that agent checks in again, it will be given an self-uninstall command. This helps clean up stray computers that are offline for long periods of time.
I’d love to see this. Among other things, when we offboard clients, we have a limited window to get our tools off of them. We can kick off uninstall deployments, but if machines don’t check in during that window but come online after we’ve deleted the tenant they turn into zombies that have to be “identified”, then tagged for the uninstall deployment, and then cleaned up again.
2 Likes
I have a few PCs from an old customer from whom I can’t get the agent removed. I can delete them in the portal, but they just come back. It would be nice to have an option to Delete and Uninstall
If it helps anyone else, and yes, we are probably doing it the hard way:
Create two new tenants in ImmyBot. Both for offboarding computers.
First one, use to uninstall, disable, remove any manage apps. Have a deployment to ignore ImmyBot agent in this one.
Second one, a single deployment to uninstall ImmyBot agent.
The idea is that ImmyBot will be the last man standing. As long as it is online we use it to try and remove everything else. Because it’s uninstall does work if it is online. Others are spotty. Most AV/EDR has self-protections so need to be removed from the associated cloud console, Avast, Webroot, Sentinel One, etc. Most other managed apps can be removed via ImmyBot.
Have maintenance run daily on the first offboarding tenant. When comfortable you’ve removed everything possible reassign PC to the next tenant to remove ImmyBot. Maintenance schedule there daily also or whatever time works for you.
The hierarchy looks like this:
Reassign PC to this tenant
“Offboarding Tenant - Apps”
ImmyBot Agent - Ignore
Uninstall AV (If possible)
Uninstall RMM
Uninstall Screenconnect
etc
Reassign PC to this tenant
“Offboarding Tenant - ImmyBot”
Uninstall ImmyBot Agent
The hard thing to keep track of is when to delete the computer from the database. Assumption is once a PC under the second tenant hasn’t checked in for quite a while, delete it.