Disable Defender for SQL Servers on Machines

This article describes how to disable Defender for SQL Servers on Machines in Microsoft Defender for Cloud. This feature allows you to manage your security posture effectively by disabling the Defender for SQL Servers on Machines plan on your virtual machines (VMs) and SQL servers.

The Defender for SQL Servers on Machines plan is one of the Defender for Databases plans in Microsoft Defender for Cloud. This plan protects SQL Server databases hosted on Azure VMs and Azure Arc-enabled VMs. By disabling

Prerequisites

• You must have Subscription Owner permissions.

• You must have the Defender for SQL Servers on Machines plan enabled in your Defender for Cloud environment.

Disable Defender for SQL Servers on Machines

Once you disable Defender for SQL Servers on Machines, the Defender for SQL Servers on Machines plan will no longer be applied to your virtual machines and SQL servers. This means that the security features and protections provided by this plan will be disabled.

1. Sign in to the Azure portal.

2. Navigate to Microsoft Defender for Cloud > Environment settings.

3. Select the relevant subscription.

4. On the Defender plans page, locate the Databases plan and select Select types.

   

5. In the Resource types selection window, toggle the SQL Servers on Machines plan to Off.

   

6. Select Continue > Save.

Disable Defender for SQL Servers on Machines at the resource level

1. In the Azure portal, search for and select:

   • Azure Arc > Data services > SQL Server instances.
     or
   • SQL virtual machines.

2. Select the relevant SQL Server instance.

3. Locate the security menu and select Extensions + applications.

   

4. Select the following extension(s):

   • Defender for SQL (IaaS and Arc)
     • Publisher: Microsoft.Azure.AzureDefenderForSQL
     • Type: AdvancedThreatProtection.Windows

5. Select Uninstall.