Forum Discussion

djolenole's avatar
djolenole
Brass Contributor
May 28, 2024
Solved

Offboard devices - Windows, MacOS, Linux

Hello,

the Defender offboarding process is a bit confusing. 

It would be nice if we have clear procedure how to perform offboarding.

 

Does device must be offboarded first and then uninstall Microsoft Defender app? 

In our environment we always wipe machine and install it again for another employee.

Is that process of wiping enough to cover offboarding, removing license,...? Just want to avoid overuse of licenses. 

 

And in a case that device must be offboarded first, do we need to offboard devices using MDM system? We use Intune for Windows, Mosyle for macOS, SureMDM for Linux.

I know that device will become inactive after some time. Does that mean that license is not in use?

 

Thank you in advance.

  • djolenole's avatar
    djolenole
    Jun 06, 2024

    Small update, looks like licenses are counted based on activity:

     

     

  • rahuljindal-MVP's avatar
    rahuljindal-MVP
    Bronze Contributor
    May 28, 2024
    MDE Offboarding is not a requirement, but recommended as part of device offboarding\retirement process. If you don’t do MDE offboarding, the device will eventually switch to inactive and get cleaned up after the retention period is over.
    • djolenole's avatar
      djolenole
      Brass Contributor
      May 28, 2024

      Thanks rahuljindal-MVP
      I did offboarding of 2 Windows machines by running local script in command prompt

      and now I see in Defender portal:

      Is this expected behavior? 

      Are these devices using license now?

      Will these devices disappear from portal after 180 days?

       

      Thanks

       

       

Resources