Hardware reference guide

GlobalProtect Administrator’s Guide 125
Manage Mobile Devices Administer Remote Devices
Remove Devices
Although end users can manually unenroll from GlobalProtect Mobile Security Manager directly from the
GlobalProtect app, as administrator you can also unenroll devices OTA. This is useful in cases where an
employee has left the company without unenrolling from the Mobile Security Manager on a personal device. To
unenroll devices, select the devices you want to remove on the
Devices tab and then use one of the following
two options:
Remove Devices from Management
• Unenroll devices. To remove a device from the GlobalProtect Mobile Security
Manager, but leave its device entry in the Mobile Security Manager,
select the device and then click . This is a good option if the
end user is still employed by your company, but the device will either
permanently or temporarily be unmanaged. By leaving the device
entry on the Mobile Security Manager you can still view information
about the device, including historical HIP match logs, reports, and
device statistics.
• Delete devices. To remove a mobile device from management and remove its device
entry from the Mobile Security Manager, select the device and then
click . This is a good option if you want to clean up the
database to remove entries for users who are no longer with the
company or to remove devices that have been replaced. Note,
however, that this action will permanently remove the device record
from the database. Additionally, if the device is enrolled at the time
that you perform the Delete action, the device will be unenrolled and
then the record will be deleted from the Mobile Security Manager
database.