Share via

How to remove unwanted device from sensor?

Shaun Lewis 0 Reputation points
2025-04-23T22:36:02.15+00:00

How do you remove devices that do not need monitoring or alerts?

Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,529 questions

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Venkata Jagadeep 1,085 Reputation points Microsoft External Staff
    2025-04-24T10:56:56.0066667+00:00

    Hello Shaun Lewis,

    As per description, we understand that you have configured Microsoft Defender for Endpoint for your devices and now you want to remove few devices which doesn't need monitoring.

    To delete a device from the Microsoft Defender dashboard, you only need to hover your mouse over the device you want to delete, select the red trash can on the right side of the device item, and click Confirm Delete to successfully delete the device.

    Removing a device from your Microsoft Defender device list removes the device and any of its Defender-related data from Microsoft Defender but doesn't remove the Microsoft Defender app from that device. You'll need to uninstall it manually from that device if you want to remove the app.

    https://support.microsoft.com/en-us/topic/removing-devices-from-your-microsoft-defender-dashboard-4794713c-fbc6-4af3-b992-ec10311057b7?preview=true

    In the Microsoft Defender portal, in the navigation pane, select Settings > Offboard,

    and then select an operating system to start the offboarding process.

    When you offboard a device from Defender for Endpoint, no new detections, vulnerability, or security data are sent to the Microsoft Defender portal. Seven days after offboarding a device, its status changes to inactive. Devices that weren't active within the past 30 days are not factored into your organization's exposure score.

    Past data, such as alerts, vulnerabilities, and the device timeline, for an offboarded device is displayed in the Microsoft Defender portal until the configured retention period expires. You also see the device profile (without data) in the device inventory for up to 180 days.

    Please refer below document to offboard devices for Microsoft Defender for Endpoint for client machines and Servers.

    https://learn.microsoft.com/en-us/defender-endpoint/offboard-machines

    Please let us know if you have further queries or concerns.

    0 comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.