Delete inactive systems: best practice

To create a duplicate of the Inactive Agent Cleanup Task, select Menu → Automation → Server Tasks, then find the Inactive Agent Cleanup Task in the server tasks list.

Click the preconfigured Inactive Agent Cleanup Task, click Actions → Duplicate.

In the Duplicate dialog box, change the server task name, then click OK.

In the server task row you created, click Edit to display the Server Task Builder page.

From the Descriptions tab, type any needed notes, click Enabled in Schedule status, then click Next.

From the Actions tab, configure these settings:

1. From the Actions list, select Run Query,

2. For Query, click ... to open the Select a query from the list dialog box.

3. Click the group tab where you saved your copy of the Inactive Agents query, select your query, then click OK.

4. Select your language.

5. In Sub-Actions, select Delete Systems from the list.

   Caution

   Do not click Remove agent. This setting causes ePO - On-prem to delete the Trellix Agent from the inactive systems when they are removed from the System Tree. Without the agent installed, when the removed system reconnects to the network it cannot automatically start communicating with the ePO - On-prem server and reinsert itself back into the System Tree.

   (Optional) Instead of using the default subaction Delete Systems, you can select Move Systems to another Group. This moves the systems found by the query to a designated group, for example, Inactive Systems in your System Tree.

Click Next, schedule when you want this server task to run, then save the server task.