It is important to have a way of removing retired/dead computers from the license count. I have a lot of computers that our Desktop guy was retiring from use and did not uninstall Symantec Endpoint protection. Now, even if you delete the computer account from AD, the license is not released. The computer is gone from SEPM, but the client count license is still the same.
I've tested it SEPM and the only way I can get the license back is if I do the following:
1) uninstall Endpoint Protection from the client
2) disjoin it from the domain and delete the computer account.
3) Either wait until Sepm sync with AD and do the clean up maintenance, or I can do the Sync manually.
It should be easy as remove it from SEPM console and delete the computer account from AD.
I am using Sepm 12.1.3