Automated Device Cleanup
A common task, although not necessarily a daily task, is retiring unused or deleting retired devices. You can retire devices that have not checked in or delete retired devices by a threshold amount of time. Deleting these devices from the database improves Ivanti EPMM performance and frees up disk space.
After saving the settings, to view the logs for the automated device cleanup, use the Filters section on the left side of the Audit Logs page to narrow the search.
Prerequisites
Make sure you are assigned the required administrator role. To delete or retire devices, you must be:
- Assigned to the global space
- Assigned the administrator role Delete retired device
Retiring devices that have not been checked-in for N days
-
In the Admin Portal, go to Settings > System Settings.
- Select Users & Devices > Automated Device Cleanup. The Automated Device Cleanup page opens.
-
Enter the settings as per below:
Table 8. Retiring of devices Field
Description
Retire Devices That have Been Not Checked-In More Than (days)
Days: 30 days is default, 365 days is maximum allowed.
Show not checked-in devices list
Selecting the link opens the Advanced searching page in Devices & Users and poplulates the search with the regular expression for the search. Select Search.
Maximum Devices to Retire in Each Session Select 100 (default), 500, or 1000.
The cleanup session may have an impact on the overall system performance. Configure the maximum limit for your environment.
Automatically Retire Devices on a Schedule
Selecting this check box expands the Retire Schedule Configuration section.
-
Daily: Select the run time from the At: drop-down menu. The default is midnight.
-
Weekly: Select the day and time for the clean up. Default value is Sunday at midnight.
-
Monthly: Select the time for a first-day-of-the-month schedule frequency. Default is first day of the month at midnight.
-
-
Select Retire Now
-
Select Save to save the configuration.
If the Retire Now button is disabled, only an administrator who is a “super administrator” can assign you to the global space and assign the Delete retired device administrator role to you. The procedure for the super administrator and definition of a super administrator are in Assigning an administrator the role to delete retired devices.
Deleting devices that have been in selected states for N days
- In the Admin Portal, go to Settings > System Settings.
- Select Users & Devices > Automated Device Cleanup. The Automated Device Cleanup page opens.
- Enter the settings as per below:
Table 9. Deleting of devices in selected states Field
Description
Select the states to take actions on
Select all or just the desired options:
Retired
Retire Pending
Wiped
Wipe Pending
Delete devices that have been in selected states more than (days)
Days: 30 days is default, 365 days is maximum allowed.
Show devices in selected states
Selecting the link opens the Advanced searching page in Devices & Users and poplulates the search with the regular expression for the search. Select Search.
Maximum devices to delete (in selected states) in each session Select 100 (default), 500, or 1000.
The cleanup session may have an impact on the overall system performance. Configure the maximum limit for your environment.
Automatically delete devices in selected states on a schedule
Selecting this check box expands the Delete Schedule Configuration section.
Daily: Select the run time from the At: drop-down menu. The default is midnight.
Weekly: Select the day and time for the clean up. Default value is Sunday at midnight.
Monthly: Select the time for a first-day-of-the-month schedule frequency. Default is first day of the month at midnight.
-
Select Delete Now
-
Select Save to save the configuration.
If the Delete Now button is disabled, only an administrator who is a “super administrator” can assign you to the global space and assign the Delete retired device administrator role to you. The procedure for the super administrator and definition of a super administrator are in Assigning an administrator the role to delete retired devices.
Retire the Retire Pending devices that have not been checked-in N days
- In the Admin Portal, go to Settings > System Settings.
- Select Users & Devices > Automated Device Cleanup. The Automated Device Cleanup page opens.
- Enter the settings as per below:
Table 10. Retire the Retire Pending devices Field
Description
Retire the Retire Pending Devices that have not been checked in for more than
Days: 30 days is default, 365 days is maximum allowed.
Hours: 1 hour is default, 23 hours is maximum allowed.
Show retire pending devices list
Selecting the link opens the Advanced searching page in Devices & Users and poplulates the search with the regular expression for the search. Select Search.
Maximum Retire Pending devices to Retire in Each Session Select 100 (default), 500, or 1000.
The cleanup session may have an impact on the overall system performance. Configure the maximum limit for your environment.
Automatically Retire the Retire Pending Devices on a schedule
Selecting this check box expands the Retire the Retire Pending Devices Schedule Configuration section.
Daily: Select the run time from the At: drop-down menu. The default is midnight.
Weekly: Select the day and time for the clean up. Default value is Sunday at midnight.
Monthly: Select the time for a first-day-of-the-month schedule frequency. Default is first day of the month at midnight.
-
Select Force Retire the Retire Pending Devices Now OR Force Retire All the Retire Pending Devices.
-
Select Save to save the configuration.
If the Force Retire the Retire Pending Devices Now OR Force Retire All the Retire Pending Devices button is disabled, only an administrator who is a “super administrator” can assign you to the global space and assign the Delete retired device administrator role to you. The procedure for the super administrator and definition of a super administrator are in Assigning an administrator the role to delete retired devices.