The Hardware Asset Register

Hardware asset management is older and easier than SaaS management, and organisations are frequently worse at it because the discipline lapsed rather than never existed.

The fields

Asset tag, physically attached and matching the record.

Type and model.

Serial number, which is the durable identifier and the one manufacturers and insurers use.

Purchase date, supplier, cost.

Warranty expiry.

Assigned to, a named person or a location.

Status: in use, in stock, in repair, retired, disposed, lost.

Location, where meaningful.

Operating system and management enrolment, which links to your endpoint tooling.

Disposal record, once retired: date, method, certificate reference.

Where registers decay

Reassignment. A laptop passed from one person to another without the record changing. The most common single error.

Home working. Assets at addresses nobody recorded.

Stock. Devices in a cupboard that nobody counted.

Repairs. Devices with a supplier for weeks, absent from the register's view.

Departures. A leaver's device not returned and not recorded as missing.

Direct purchases. A team buying a monitor on a card, never registered.

Reconciliation

The activity that keeps the register honest, and the one that gets deferred indefinitely.

Compare the register against your endpoint management system. Devices checking in that are not in the register, and devices in the register that have not checked in for months. Both lists are findings.

Compare against the identity provider. Users with no assigned device, devices assigned to users who left.

Physically count the stock cupboard, quarterly.

Ask people, annually. A short confirmation: do you still have this device, is it at this address.

The endpoint comparison is the highest-value and the cheapest, because both systems already exist and the join is on serial number or device name.

What the first reconciliation finds

Devices unaccounted for. Not necessarily stolen — usually reassigned, disposed of informally, or sitting in a drawer.

Devices assigned to leavers.

Devices past warranty that nobody planned to replace.

Devices not enrolled in management, which is a security finding rather than an inventory one.

Duplicate records for the same asset.

Tagging

Tag on receipt, before deployment. Tagging later never happens.

Durable labels in a consistent position.

A sequential number that means nothing, rather than one encoding location or owner, because both change.

Photograph the asset and the serial plate at registration. This takes seconds and it resolves disputes and warranty claims later.

Keeping it current without a project

Register at receipt, as part of the goods-in process.

Update at assignment, as part of the joiner process.

Update at return, as part of the leaver process.

Reconcile against endpoint management monthly, automatically, with exceptions reviewed.

Physically reconcile annually.

A register maintained at the lifecycle events stays accurate. One maintained by periodic audit does not, because the audit is always overdue.

The monthly endpoint comparison

One query that keeps a hardware register honest, run against your endpoint management platform.

Devices checking in that are not in the register. Unregistered assets, usually direct purchases or devices from an acquisition.

Register entries with no check-in for thirty days. Devices in stock, in repair, lost, or disposed of without the record being updated.

Assignment mismatches between the register's assigned user and the platform's primary user. Unrecorded reassignments.

Devices assigned to people no longer in the directory. The leaver recovery gap.

Unencrypted devices, which is a security finding rather than an inventory one.

Five lists, each short after the first run. This is the whole ongoing maintenance and it takes under an hour.

The annual physical reconciliation

The endpoint comparison catches most drift. Once a year, something has to check the things that never check in.

Count the stock cupboard, physically, against the register.

Confirm home-based devices by asking, with a one-click reply.

Check devices marked in repair against supplier records.

Check devices marked disposed against certificates.

Investigate anything unaccounted for rather than writing it off silently, because the pattern matters more than the individual item.

Report the discrepancy rate. A falling rate means the lifecycle events are being recorded; a stable one means the annual count is doing work that should happen continuously.