Forum Discussion
Solved
Exlude a Computer for some hour from defender from endpoint
Hello I would like to know if there is a way to exclude defender for endpoint protection from a pc from a couple of hours. Kind regards
- You can set the device to troubleshooting mode, this doesn't turn off any protections but it will allow local admin to turn them off. Or, you could offboard the device using the API and then onboard it again when you are finished.
pozlu0 you could create a new Alert Tuning Rule to auto-resolve/ hide alerts for this device. The condition would look like in the screenshot. After you are done you only need to remove this rule. For sure this only helps in case you want to exclude from MDE Alerting. Otherwise jbmartin6 described the approaches you could take.