Forum Discussion
bellinghamlady
Mar 17, 2021Copper Contributor
Cannot remove tags
I have a few tags appearing Microsoft Defender Security Center. I cannot remove them either in the UI or using the Add/Remove tag API. I don't see them in the registry key either. These tags appea...
- Mar 18, 2021I'd also suspect that someone has taken the sample Jamf/Intune property lists on the following page a bit too literally.
https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/mac-preferences
Those do indeed set a tag named "ExampleTag".
bellinghamlady
Mar 17, 2021Copper Contributor
I also get this message from the API:
"error":{"code":"InvalidInput","message":"The Tag ExampleTag is a device tag and cannot be removed from the API","target":"dxxxx....
"error":{"code":"InvalidInput","message":"The Tag ExampleTag is a device tag and cannot be removed from the API","target":"dxxxx....
- akakakMar 18, 2021Copper Contributor
From the machine name I'd guess this is a MacBook Pro.
In that case, the tag was probably set using the mdatp command, and would work similarly to the Registry based tags on Windows. You'll probably need to run the mdatp command on the machine to remove it.
- akakakMar 18, 2021Copper ContributorI'd also suspect that someone has taken the sample Jamf/Intune property lists on the following page a bit too literally.
https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/mac-preferences
Those do indeed set a tag named "ExampleTag".