MS Defender agent uninstalling - Complete #help

Mohammed Altamash Khan 2,086 Reputation points
2022-08-01T09:38:33.96+00:00

Hello Community

I have a VM where a 3rd party AV is installed , previously we were using MS defender endpoint but it was giving pain for redhat machines.

Problem : I have a win10 VM where i have uninstalled the MDE agent from extension . but end user is complaining that service is still running and cannot be stop since its grey out.
I search the machine in security.microsoft.com and it was showing ACTIVE status , it means defender is still on but i dont see it in the extension pane .
In extension pane i can only see 3 Extension : 1 ) domainjoin 2) DSCMicrosoft.Powershell.DSC2. 3)MicrosoftMonitoringAgent

i need to remove the defender endpoint completely from this win10 machine.

Regards

Azure Monitor
Azure Monitor
An Azure service that is used to collect, analyze, and act on telemetry data from Azure and on-premises environments.
2,960 questions
Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,250 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Givary-MSFT 30,176 Reputation points Microsoft Employee
    2022-08-04T04:33:26.127+00:00

    @Mohammed Altamash Khan Thank you for reaching out to us. As I understand you want to offboard/remove defender for endpoint from windows 10 VM.

    There is a process to offload the VM, which is documented here - Offboard devices using a local script, wanted to check if you have followed this.

    Let me know if you have any further questions.

    1 person found this answer helpful.