Rogue Devices but WITH OUR AGENT

[FFTY]

Scenario: Our lansweeper instance discovered 5 rogue devices. I would understand it if it was simply an end user who brought something in and lansweeper discovered it via IP address.  However, these devices were all discovered via the agent.  Here's the information we get from them.

Domain Name (internal), Hostname, Username, LAN IP (3 different subnets), Agent version, OS, Last scan (today and last month).

None of the info is related to us. I am totally confused as to how this could happen without them using our Relay key.  I'm not even sure what the benefit would be.  

Any ideas?

[DavidPK]

Hi,

Lansweeper never auto‑discovers agents. The only way an “agent” asset appears is:

1. The agent is installed on that device, and
2. It’s explicitly configured (by URL, token, or relay key) to send scans to your environment

So, there’s no mechanism where a totally unrelated machine can magically appear as an agent asset without someone at some point having used:

Is it possible that the company used to own these laptops/desktops, deployed LsAgent to them, then they:

• Left with an employee
• Were sold to a recycler / another org
• Were repurposed elsewhere

You can create a support ticket, and we can take a deeper look. 

Please open a ticket in our support portal.

Make sure to add screenshots and the GatherLogs output file so our SME's can start investigating the issue straight away. 

Using the GatherLogs tool.