Replacing Win 10 Security Profile with another creates conflict

Hi all,

I've created a new test profile under Endpoint Security -> Antivirus for Defender, lets call it "AV-New". I've created a new device group called TestDevices and excluded the group from the current "AV-Current" policy.

So, AV-NEW assigned to only TestDevices and AV-Current assigned to All, excluding TestDevices.

Checking in on my AV-New policy, I can see there is a conflict.

Going to Device Status -> Selecting the Device -> Windows Defender Antivirus, I can see each setting seems to have 2 entries.

Selecting a setting with a conflict, i.e. scan emails shows two profiles assigned, AV-New and AV-Current.

The profiles/device has been in this state for over a week.

Why is this the case, even though I've excluded the device from AV-Current?

How can I remove a profile - i.e. AV-Current for this device?

Thanks heaps.