To move a device to a zone where Endpoint Security Management is active and the Endpoint Security Agent is an enabled feature for the ZENworks Agent:
Unregister the device. See Unregistering a Device
in the ZENworks Discovery, Deployment, and Retirement Reference.
This clears all security policies and removes the device as a registered device in the zone.
Register the device in the new zone. See Manually Registering a Device
in the ZENworks Discovery, Deployment, and Retirement Reference.
If the device had a Data Encryption policy applied to it in the old zone, export the data encryption keys from the old zone and import them into the new zone. See ZENworks Endpoint Security Policies Reference.