Chapter 14 Managing Devices : Endpoint Protection : Deregistering endpoints
  
Deregistering endpoints
FortiClient endpoints no longer used on the network can be deregistered using the CLI. You need to determine the endpoint ID and then use that ID in the deregistration command.
To view FortiClient IDs on a specific address
Specify the IP address of the endpoint. For example, to find the FortiClient ID at 192.168.0.120, enter
diagnose endpoint registration 192.168.0.120
To view all FortiClient IDs
diagnose endpoint registration any
To deregister a FortiClient endpoint
Specify the endpoint ID. For example, enter
diag endpoint registration deregister 07BF6C3778195F4AB57995ADA48C56FB
To deregister all FortiClient endpoints
diagnose endpoint registration deregister all