Deleting, Rebuilding, and Re-enrolling Devices

When an existing endpoint should keep its identity, when a new enrollment is appropriate, and how to avoid duplicate devices.

Guide Agent Security Enrollment Troubleshooting Devices

Most managed endpoints should keep the same remFREE device identity throughout their normal lifecycle.

Re-enrollment is not intended to be routine maintenance.

Temporary connectivity problems

Do not re-enroll a device merely because it temporarily appears offline.

First investigate:

If the existing agent identity is healthy, restoring communication is preferable to creating another device record.

Re-enrollment can be appropriate when:

A major operating-system rebuild may effectively create a new endpoint identity from the management platform's perspective.

Before re-enrolling, determine whether historical information from the previous device record should be retained.

Deleting historical records merely to make the device list look tidy can remove useful operational evidence.

Repeated enrollment can create duplicate records representing the same physical machine.

Before enrolling again, determine whether an existing record already represents the endpoint.

Duplicate devices can make:

Deleting a managed device is an administrative action.

Before deletion, consider whether the record contains information that may still be useful, including:

Deletion and cleanup policies should reflect the organization's operational and retention requirements.

A device should belong to the intended remFREE tenant.

Moving an endpoint between organizations should be treated as a trust-boundary change rather than merely changing a display label.

The new tenant relationship should be established intentionally.

A device record represents more than a hostname.

Hostnames can be reused.

Machines can be renamed.

An endpoint identity exists so remFREE can maintain continuity between:

Preserving that continuity makes the platform more trustworthy.

If the device is merely offline, troubleshoot it.

If the agent installation is damaged, repair it where practical.

If the endpoint was fundamentally rebuilt or intentionally removed, re-enrollment may be appropriate.

Avoid using re-enrollment as a generic fix for problems that are actually connectivity or service issues.