How to deactivate devices when using Webroot Business Endpoint Protection

You can deactivate devices directly from the Webroot Management console, using the Agent Command Deactivate Device. When you deactivate a device:

The Business agent is uninstalled.
The device will not be considered against excess billing in the next billing period.
The entry for the device is moved to the Deactivated Group accessible via the Endpoint Protection console.
It is not possible to receive an alert if a device doesn't receive and process the deactivation request.

If you deactivated a device by mistake and want to re-install the Webroot agent, you first need to reactivate the device.

Note: The term Webroot agent refers to the Webroot Business Endpoint Protection agent.

To have deactivated devices removed permanently from the console, please contact Webroot Support.

Tip: If you don't want to remove the endpoint from the Management Portal but still want to uninstall the agent software, you can send an Uninstall Agent command instead. This action retains the endpoint entry in the Webroot Management console (although it displays a status of "Not Seen" after 7 days). See Using Agent commands with devices for more information.

Billing questions
If you have questions about invoices and want to see detailed information regarding device usage, please use the Webroot My Usage console to gain further insight. See the article on My Usage for more information on using it.

If you have specific questions regarding past invoices, please contact your Customer Success Manager or send an email to CustomerSuccess@webroot.com.

To deactivate devices:

Log in to the Webroot Management console.
In the left nav bar, click Entities.
Find the site that contains the devices and click the down caret to display a list of the site’s groups.

Tip: To help avoid complications in case there are difficulties uninstalling the agent, it is recommended that you change the Endpoint policy to Unmanaged. This provides control for the agent software to local administrators.

Click a group to display the devices for the group.
Check the boxes for the devices to be deactivated, click the Agent Commands drop-down menu and select Deactivate Device. In the next window, click Deactivate Device to confirm the command and send it.

Note: Deactivation commands are sent to devices one group at a time. If there are devices in multiple groups that need to be deactivated, send one command per group.
The agent will be uninstalled from the device when the device checks-in. Deactivated devices are moved to the Deactivated Group accessible via the Endpoint Protection console. Deactivation commands stay active for 30 days from issue.

For more information see:
- Investigating devices that continue to check-in after being deactivated.
- Uninstalling the Business agent.

If you need additional assistance removing the Business agent, please contact Webroot Support.

Thanks for your feedback!