Every laptop tells the truth. What does yours say after Day One?

What carries over from the seller, and what does not. Inventory is the precondition.

The first task is a complete inventory of Newco endpoints. Devices in use today by transferring employees, devices in stock or warehouse, mobile devices under corporate enrollment, kiosks, point of sale terminals, and shop floor devices. The inventory comes from the seller's endpoint management system and is reconciled against the HR transfer list so that no device is missed and no seller device is accidentally migrated.

The asset transfer terms in the deal documents specify which devices physically move to Newco and which stay with the seller. The buyer-side advisor confirms that the TSA covers continued management of Newco devices in the interim, including patching, security agents, and support. Without explicit TSA scope, the Newco fleet drifts from the seller's standards within weeks of close and a security gap opens.

Special device categories need their own track. Engineering workstations with high specification software, lab devices with calibration history, manufacturing devices with shop floor controls. Each category has a separate migration approach and a separate cutover window. The work pairs with the carve-out IT separation playbook.

Reimage, re enroll, or replace. Three paths. Pick deliberately.

Three approaches cover almost every device. Reimage rebuilds the device from a Newco gold image, wiping the seller's configuration entirely. Re enroll keeps the current image but switches the management agent, security tooling, and identity binding to Newco. Replace ships a new Newco managed device to the user and the old device is returned.

Reimage is the cleanest and the most disruptive. The user loses local profile state and personalization, and the device is unavailable for several hours. Re enroll is the fastest and the most exposed to drift from seller policy artifacts that survive the change. Replace is the most expensive in hardware but lowest in user disruption when handled with a swap shipment that arrives ready to use.

Most carve-outs use a mix. Replace for executives and key knowledge workers where downtime is costly. Reimage for office workers in batched waves. Re enroll for specialized devices where reimaging is operationally risky. The buyer-side advisor builds the mix against the budget and the timeline. The work pairs with carve-out active directory migration.

MDM and EDR transitions. Two agents. Two timelines.

Device management and endpoint security are the two agent layers that have to move. Mobile device management for configuration, application delivery, and policy. Endpoint detection and response for security telemetry, threat hunting, and incident response. Both layers carry data that has to migrate, and both have licensing that has to transition.

Newco usually picks the same product family the seller uses if licensing allows it, because user experience continuity matters more than tool optimization during the TSA. If licensing forces a change, the buyer-side advisor reviews the change with the Newco CISO so the security operating model adapts to the new tool capabilities.

During the transition window, the device usually runs both agents. The seller's MDM continues to apply policy while the Newco MDM is being enrolled and validated. The two agent state is short by design because policy conflicts can break user experience or generate false security alerts. The buyer-side advisor pushes for a clean cutover window per wave rather than an extended dual run. The work pairs with TSA CrowdStrike security separation.

Software and entitlements. Newco does not own the seller's licenses.

Software entitlements are the hidden complexity of endpoint migration. The seller's enterprise agreements typically cover the seller's legal entity. Newco needs its own licensing for productivity suites, design tools, engineering software, statistical packages, and the long tail of department specific applications. Without correct licensing on Day One, Newco is non compliant on its own endpoints.

A licensing assessment runs alongside the inventory. Each installed application gets mapped to its license source: enterprise agreement, individual purchase, shareware, or open source. Applications under seller enterprise agreements need a Newco equivalent license by the cutover wave for that device, or a removal plan if Newco does not want the application going forward.

The work also surfaces opportunities for rationalization. The seller's accumulated installed base includes applications that are no longer used, duplicate tools, and trialware. Newco picks up the migration as an opportunity to rationalize so the standalone Newco environment carries less drag. The work pairs with carve-out application portfolio rationalization.

Support model and helpdesk transition. The first ticket tests everything.

When a Newco user has a problem with a device after cutover, who do they call. The TSA usually covers seller provided helpdesk for a defined period. Newco stands up its own helpdesk on its own schedule. The handoff between the two has to be coordinated so users always know where to go.

Most carve-outs run a phased model. Phase one, seller helpdesk handles all tickets through the seller's existing channels. Phase two, Newco helpdesk goes live as the primary contact and the seller helpdesk handles only escalations. Phase three, Newco helpdesk handles everything and the seller's service is decommissioned. Each phase has clear entry and exit criteria.

Knowledge transfer between the two helpdesks is the part that fails most often. The seller's helpdesk has institutional knowledge that does not move with a written handover document. Pair shifts, shadowing weeks, and a shared queue during phase two are the practical ways to transfer the institutional knowledge. The work pairs with carve-out helpdesk and ITSM transition.

Lessons from the floor. Predictable patterns. Repeatable fixes.

Three lessons surface on almost every endpoint migration. First, user communication beats user training. Users need to know what is happening to their device, when, what they need to do, and where to get help. A short, well timed email lands better than a thirty minute training video.

Second, pilot waves matter. The pilot exposes the bugs in the gold image, the gaps in the application catalogue, and the holes in the helpdesk runbooks. Skipping the pilot to save time always costs more time on the larger waves that follow. The buyer-side advisor protects the pilot schedule even under pressure.

Third, the device migration completion is not the end of the work. Lost personalization, missing files, broken integrations, and old shortcuts surface for weeks after cutover. A dedicated post cutover support cell handles this long tail. Closing the long tail well builds the credibility Newco IT needs to support the rest of the standalone build out. The work pairs with carve-out network separation and carve-out application portfolio rationalization.

More on carve-out technology.