Retiring and deleting unused and retired devices

As device users leave your enterprise or change to new devices, you will need to retire devices. When you retire a device, Ivanti EPMM de-registers it and no longer manages or secures the device. All the configurations and settings that Ivanti EPMM had applied to the device are removed. The device can no longer access enterprise data or apps.

However, Ivanti EPMM retains retired and unregistered devices in its database. Deleting these devices from the database improves Ivanti EPMM performance and frees up disk space. Although Ivanti EPMM also provides a web services API and a CLI command to delete these devices, using the Admin Portal display is easier. It provides an easy way to automatically delete or retire devices on a regular schedule.

Within the Admin Portal display, you can:

• Easily navigate to lists of unregistered and retired devices.
• Retire or delete devices that have been retired or not checked in for more than a specified number of days.
• Configure Ivanti EPMM to automatically retire or delete devices daily, weekly, or monthly.

You can use this display only if you are assigned to the global space and you are assigned the administrator role Delete retired device. Otherwise, the actions on this display are disabled.

When Ivanti EPMM retires or deletes retired devices due to your actions on this display, it records Delete Retired Device events in the audit log. Personal data related to retired devices can be deleted by deleting the local user. However, LDAP users cannot be permanently deleted unless the LDAP server or group has been deleted, in which case the LDAP users become local users and can be deleted. If a user is deleted on the LDAP server, the user is automatically removed from Ivanti EPMM during the next LDAP sync.