How to offboarding endpoint from Purview

Hi Yohann,

To fully remove devices from Purview Endpoint DLP, you need to run the Purview offboarding package, not the Defender for Endpoint offboarding script. Purview uses its own onboarding client, so removing the Defender agent won’t remove the devices from Purview.

Here’s what to do:

1. Download the Purview offboarding package

Go to:

Purview portal → Settings → Device onboarding → Offboarding

Download the Windows offboarding package and run the included script on each device with admin rights.

(You can also deploy it in bulk through Intune, GPO, or SCCM.)

2. Wait for backend sync

After the script runs, the device stops reporting to Purview.

It can take up to 24 hours for the device to disappear from the “Onboarded devices” list.

3. Devices remain protected by Defender

Offboarding from Purview DLP does not remove Microsoft Defender for Endpoint, so the devices stay protected without Purview policies.

Hope this helps! :)