cloned VM for testing purpose - fix Sophos Central GUID with golden image script?

Hi LHerzog,

Thanks for reaching out to the Sophos Community Forum. 

If you will no longer have a use for the original device, it can safely be deleted. One way to verify it is safe to remove the old entry is to check the Persists folder against the URL shown in Sophos Central when browsing the device(s) you wish to keep connected. The UUID in this file will match the URL in Sophos Central. 
- C:\ProgramData\Sophos\Management Communications System\Endpoint\Persist\EndpointIdentity.txt

If you find that two different local devices share the same "EndpointIdentity", this is where problems can arise. This should not be the case when using the gold image script or cli option.

The following is also mentioned in the documentation:
Notes:

• If the device from where the gold image will be taken will no longer be used, it can be safely deleted from the Central dashboard before running the script to avoid duplicates. In case it is accidentally deleted, its tamper protection password can be recovered by following Sophos Central: Restore a deleted device .  

A new issue has been reported which may be related to the behavior you're experiencing. 

See: Advisory: Duplicate device entries seen in Sophos Central as a result of device re-registration