Offboard devices from the Microsoft Defender for Endpoint service


Welcome to Microsoft Defender for Endpoint, the new name for Microsoft Defender Advanced Threat Protection. Read more about this and other updates here. We'll be updating names in products and in the docs in the near future.

Applies to:

Want to experience Defender for Endpoint? Sign up for a free trial.

Follow the corresponding instructions depending on your preferred deployment method.

Offboard Windows 10 devices

Offboard Servers

Offboard non-Windows devices


Offboarded devices will remain in the portal until retention period for the device's data expires. The status will be switched to 'Inactive' 7 days after offboarding.
In addition, Devices that are not active in the last 30 days are not factored in on the data that reflects your organization's threat and vulnerability management exposure score and Microsoft Secure Score for Devices.
To view only active devices, you can filter by health state or by device tags and groups etc.