Method and apparatus for theft protection for devices in a network

A plurality of methods, apparatus and computer programs for detecting both the authorized and unauthorized removal of a plurality of consumer electronic devices configured in a network based on these devices being in a protected or unprotected state. In a preferred embodiment, a thus protected networked consumer electronic device considers itself removed from the network without authorization if its protection state is "protected" when detecting its own removal from the network and it considers itself removed from the network with authorization if its protection state is unprotected when detecting its own removal from the network. Alternatively, another device monitors the protected device's protection state and considers the device removed from the network without authorization if the last known protection state is "protected" when the other device detects the removal of that device from the network and considers the device removed from the network with authorization if the last known protection state is "unprotected" when the other device detects the removal of that device from the network. A response is generated to the user that distinguishes between removal with and without authorization.