Offboard devices from the Microsoft Defender for Endpoint service
Welcome to Microsoft Defender for Endpoint, the new name for Microsoft Defender Advanced Threat Protection. Read more about this and other updates here. We'll be updating names in products and in the docs in the near future.
- Windows Server 2012 R2
- Windows Server 2016
- Microsoft Defender for Endpoint
Want to experience Defender for Endpoint? Sign up for a free trial.
Follow the corresponding instructions depending on your preferred deployment method.
Offboard Windows 10 devices
- Offboard devices using a local script
- Offboard devices using Group Policy
- Offboard devices using Mobile Device Management tools
Offboard non-Windows devices
Offboarded devices will remain in the portal until retention period for the device's data expires. The status will be switched to 'Inactive' 7 days after offboarding.
In addition, Devices that are not active in the last 30 days are not factored in on the data that reflects your organization's threat and vulnerability management exposure score and Microsoft Secure Score for Devices.
To view only active devices, you can filter by health state or by device tags and groups etc.