Computers that are no longer in service or that you choose not manage with an agent may be deleted from the Carbon Black App Control Server.

Before you delete a computer from the Computers table in the console, you first change the computer’s Enforcement Level to Disabled and then uninstall the agent. See "Uninstalling App Control Agents" in the VMware Carbon Black App Control Agent Installation Guide for more detail.

If you do not uninstall the agent before you delete a computer and that computer remains connected to the same network as your Carbon Black App Control Server, the computer will reappear in the computer table as soon as it polls the Carbon Black App Control Server. If connected to the network, computers immediately return to the table; if off-line, computers return upon reconnection. Deleted computers that continue to run the agent return to their last recorded policy. If you have deleted the policy applied to the computer by its agent installer, the server moves the computer to the Default Policy.

Note: If a computer running the agent cannot connect to the App Control Server and you want to remove its agent, contact Carbon Black Support.

Files on deleted computers remain in the Files on Computers inventory for a short period of time, 24 hours by default. See Files on Deleted Computers for an illustration of how these files appear in search results.

Delete a computer from the App Control Server

Use this procedure to delete a computer from the Carbon Black App Control server.

Procedure

  1. In the console menu, choose Assets > Computers. The Computers page appears.
  2. Find the computer you want to delete and check the checkbox next to its name.
    The computers page with a computer selected
  3. In the Action menu, select the Move command for your agent disabled policy from the menu (it is shown as “Agent Disabled” below but you can call it anything you want; it must have an Enforcement Level/Mode of Disabled).
    The Action menu with Agent Disabled highlighted
  4. In the confirmation dialog box, click OK to trigger the policy change. Watch the description of the computer in the table to see when the change is completed.
  5. Once the agent for this computer is in the agent disabled policy and displays an Enforcement Level of Disabled, delete the agent software from the computer itself.
  6. After the agent software is uninstalled, on the Computers page, locate the name of the computer whose agent you removed and check the box next to its name.
  7. On the Action menu choose Delete Computers.
    The action menu with Delete Computers highlighted
  8. On the confirmation dialog box, click OK to complete the deletion.