What happens when an endpoint is deleted from Sophos Central?

When an endpoint is deleted from Sophos Central, the Endpoint agent is indeed removed from the machine. This process ensures that the machine is no longer managed by Sophos Central and that any policies or security measures enforced by Sophos are no longer applied.

This action typically involves the uninstallation of the endpoint software from the device, which means that any security features that were being managed or monitored through Sophos Central will cease to function on that endpoint. This is crucial because it helps maintain the integrity of endpoint management and prevents unmonitored devices from potentially being exposed to security risks.

Looking at the other possibilities, reformating the device or automatically re-installing security software does not occur when a device is deleted from the centralized management console. The endpoint may continue to operate normally, but it will no longer receive updates, protection, or configuration management from Sophos.