13.5 Agent states at a glance

You see Meaning What enforcement does
Online, Licensed Normal Full
Offline No heartbeat for 180 s Continues from the cached, signed policy. Updates and commands wait (commands up to 15 min).
Disabled disable command applied Off until Enable
pending approval Enrolment approval required Passive: no policy, no commands
Passive / Over limit License gate closed or seat cap exceeded Not enforcing
unprotected Policy says tamper protection, agent did not receive it Enforcing a sanitized policy; tamper protection and password uninstall unavailable
not enrolled 1.1.x agent Cannot connect to this server
revoked Identity revoked Rejected until it re-enrols