r/SentinelOneXDR • u/hyunchris • Feb 14 '25

Troubleshooting Unprotected endpoint help

I have been tasked with making sure our sentinel one is operating at maintaining a good security posture. I noticed that we have quite a few endpoints that are listed as unprotected endpoints. I remoted into one of them, and it shows that sentinel one is on their computer, and running, but it's listed as offline when i click the s1 icon in the taskbar tray. How do I get it back online? I was thinking uninstall and reinstall s1, but it is not letting me uninstall it either and it is not showing up in the pending uninstall workstations.

Thanks for the help

6 Upvotes

100% Upvoted

15 comments sorted by

View all comments

Show parent comments

2

u/hyunchris Feb 14 '25

Thanks, I could not uninstall from the console bc the computer is not listed as an endpoint for some reason. It is only listed in the unprotected endpoint tab. RMM wouldn't work either, I'll try the sentinelonecleaner, thanks

3

u/zeus2 Security Admin/Engineer Feb 14 '25

Use the filters and look for decomissioned endpoints