Endpoint Services Onboarding

Endpoint Management uses Datto Remote Monitoring and Management technology to support monitoring, patching, maintenance, lifecycle management, and ongoing support for covered servers and workstations.

During onboarding, TPx will work with your team to prepare covered devices for ongoing service and establish the settings that will guide how those devices are monitored and maintained.

Endpoint Review and Service Setup

TPx will:

• Review the servers and workstations included in your service
• Validate that covered devices meet applicable operating system and service requirements
• Configure your Endpoint Management environment
• Provide guidance for deployment of the Datto RMM agent
• Verify that covered devices are connected and reporting to the Endpoint Management platform
• Gather available hardware, operating system, and software inventory information
• Establish technical, support, and escalation contacts

The Datto RMM agent provides TPx with visibility into supported device health, performance, software, and configuration information and enables the remote management capabilities used to deliver the service.

Monitoring and Alerting

TPx will configure monitoring and alerting for supported systems based on TPx recommended practices.

Depending on the supported device and operating system, monitoring may include:

• Device availability
• CPU and memory utilization
• Disk capacity
• Windows event logs
• Patch status
• Antivirus or endpoint security software status
• Other supported health and performance indicators

Monitoring information helps TPx and your team understand the condition of covered systems and identify issues that may require attention.

How alerts are handled depends on your selected Endpoint Management service level.

Patching and Maintenance

TPx will review patching and maintenance requirements with your team during onboarding.

This includes:

• Establishing patching policies for supported Windows operating systems
• Establishing patching for supported third-party applications
• Reviewing maintenance windows
• Reviewing workstation and server reboot expectations
• Identifying systems or applications that may require special patching considerations
• Reviewing approved exceptions needed to support business applications

TPx uses managed patching to help keep supported systems current with applicable operational and security updates.

System Health and Readiness

As covered devices are brought into the Endpoint Management platform, TPx will gather available system information to help establish the current condition of the environment.

This may include reviewing:

• Hardware and software inventory
• Operating system status
• Available disk capacity
• Patch status
• Device health and performance information
• Hardware warranty and lifecycle information
• Existing conditions that may affect ongoing support

If TPx identifies conditions that should be addressed before or during ongoing service, your onboarding team will review those items with you and discuss appropriate next steps.

Lifecycle and Inventory Visibility

Endpoint Management includes ongoing visibility into supported device inventory and lifecycle information.

During onboarding, TPx will establish the information needed to support ongoing reporting related to areas such as:

• Device inventory
• Hardware warranty status
• Operating system lifecycle
• Patch status
• Device health and performance

This information can support maintenance planning and future equipment lifecycle decisions.

RMM Access

Authorized customer contacts may receive access to the Datto RMM platform for supported self-service functions.

Available access can provide visibility into supported devices and inventory and may include secure remote access capabilities.

TPx will review applicable access requirements with your team during onboarding.

What We Need From You for Endpoint Management

To prepare your Endpoint Management service, your team should be ready to:

• Provide an accurate list of covered workstations and servers
• Ensure covered devices use supported operating systems
• Ensure covered devices have sufficient available storage for required management and patching activities
• Provide information about critical applications and operational requirements
• Identify maintenance windows or scheduling constraints
• Identify systems that require special patching or reboot considerations
• Provide technical contacts who can assist with deployment and configuration questions
• Help ensure covered devices remain online and accessible during required onboarding activities

For covered servers, applicable hardware warranty or support coverage may also be required.

Transition to Ongoing Endpoint Management Service

Once covered devices are connected, configured, and ready for service, TPx will establish the monitoring, patching, maintenance, reporting, and support capabilities included with your Endpoint Management service level.

Your Endpoint Management service will then transition from onboarding to ongoing TPx support and service management.

Managed Endpoint Security uses the SentinelOne platform to provide endpoint threat detection and response. TPx guides the implementation process from platform configuration through pilot, production rollout, and transition to ongoing service.

Plan

TPx will work with your team to prepare the implementation approach.

Activities include:

• Reviewing the endpoints included in the service
• Reviewing the deployment method
• Identifying endpoint requirements
• Identifying critical applications and potential interoperability considerations
• Determining whether different endpoint groups require distinct policies or exclusions
• Identifying representative users or devices for the pilot
• Establishing technical and security escalation contacts
• Reviewing agent update and maintenance considerations

For Advanced solution tier customers, planning also includes establishing response authority and incident escalation requirements.

Configure

TPx will prepare the SentinelOne environment for deployment by:

• Provisioning and configuring the SentinelOne environment
• Applying baseline protection settings
• Reviewing policies and applicable exclusions
• Establishing endpoint groups where appropriate
• Reviewing authorized response actions for Advanced customers
• Preparing the environment for pilot deployment

Pilot and Validation

Before broader deployment, TPx will work with your team on a controlled pilot using representative endpoints.

The pilot helps validate:

• Protection settings
• Endpoint performance
• Application interoperability
• Potential false positives
• Policies and exclusions
• Deployment considerations

TPx will review pilot findings with your team and make appropriate configuration adjustments before broader rollout.

Production Rollout

After pilot validation, deployment expands to the remaining in-scope endpoints.

During rollout, TPx will support implementation issues and continue to refine the environment as needed. Your team will coordinate access to in-scope endpoints and identify issues that could affect deployment.

Protection depends on the SentinelOne agent being deployed, active, and communicating from each in-scope endpoint.

What We Need From You for Managed Endpoint Security

To help prepare your Managed Endpoint Security service, your team should be ready to:

• Provide an accurate list of the endpoints included in the service
• Identify primary, technical, and security escalation contacts
• Provide information about critical applications or operational constraints
• Identify representative users or devices for the pilot
• Coordinate access to in-scope endpoints
• Surface application, interoperability, or deployment concerns
• Help ensure in-scope endpoints can communicate with the SentinelOne platform
• Review key implementation decisions and approved exceptions
• Provide practical feedback during the pilot and rollout

For Advanced solution tier customers, your team will also work with TPx to establish response authority and incident escalation requirements.

TPx will review deployment requirements, responsibilities, and available deployment options with your team during onboarding.

Standard solution tier (EDR)

With the Standard solution tier (EDR), TPx manages platform configuration, technical support, ongoing service management, and escalation coordination.

Once the service is active, SentinelOne agent monitors endpoint activity and generates security alerts.

Your team manages:

• Alert review
• Investigation of suspicious activity
• Severity decisions
• Security response decisions

Your organization retains control of investigation and response decisions.

Advanced solution tier (EDR + MDR)

With the Advanced solution tier (EDR + MDR), SentinelOne MDR analysts provide:

• 24/7 monitoring
• Alert investigation
• Threat triage
• Proactive Threat Hunting
• Approved response actions based on established response authority

TPx manages service coordination, technical support and escalation, incident communications, and ongoing service management.

Your organization retains response authority and business-impact decisions.

Response Authority

For Advanced solution tier customers, response authority is established during onboarding.

Response authority defines:

• Which security response actions may be taken
• When customer approval is required
• Who can approve response actions
• Who should be contacted during a security incident

Establishing response authority helps create clear expectations before the service transitions to ongoing operations while keeping your organization in control of business-impact decisions.

Transition to Ongoing Managed Endpoint Security Service

Before implementation is completed, TPx will verify that the applicable onboarding activities are complete and that your service is ready for ongoing operation.

This may include verifying:

• In-scope endpoints
• SentinelOne agent connectivity
• Approved protection settings
• Policies and exclusions
• Support and escalation contacts
• Response authority, where applicable
• Completion of pilot and production rollout activities
• The ongoing operating model for your solution tier

At transition, TPx will establish the appropriate ongoing support paths and contacts.

TPx remains your customer-facing point of contact for ongoing service support and escalation.

Download the Endpoint Security Implementation Guide

Get a clear overview of what to expect during implementation, including key steps, roles, responsibilities, and how TPx supports you from kickoff through ongoing service.

Download the Guide →