Forum Discussion

neilcarden's avatar
neilcarden
Brass Contributor
May 21, 2020
Solved

Remove devices from MDATP portal

We have a couple of devices that are showing in MDATP which we would like to get rid of, however we are not in a position to run any scripts... One was registered in InTune by mistake and has been u...
  • KateAWin's avatar
    KateAWin
    May 29, 2020

    neilcarden Sorry for the confusion, it's poorly labeled in ATP. Here is a screenshot of what it should look like before you run the query (it looks like you're entering the comment in the bottom "Response body" when it should be the top unlabeled input box):

     

     

    Thank you,
    Kate

     

     

neilcarden's avatar
neilcarden
Brass Contributor
May 26, 2020

KateAWin Thanks for your response... I have tried this on two machines... and get the following error

 

{
    "error": {
        "code": "InvalidRequestBody",
        "message": "Request body is incorrect",
        "target": "a66d6701-05de-45ea-xxxx-439235eec2cf"
    }
}
 
Google search doesn't return much in way of help
KateAWin's avatar
KateAWin
Brass Contributor
May 27, 2020

neilcarden In order to post the HTML on this web page, I had to include quotation marks before and after the brackets: "{}" 

 

Remove only those two quotation marks, but keep the rest of the code. Also, you can give it a try without entering anything in the body. I would assuming the comment is optional, though I've never tried it myself.

 

Thank you,

Kate

  • neilcarden's avatar
    neilcarden
    Brass Contributor
    May 29, 2020

    KateAWin Thanks again for responding however I am a bit confused.

     

    So I am running this query (not real machine id)

     

    https://api.securitycenter.windows.com/api/machines/aaf8969262fd9031978bf7955b102547d22ff302/offboard

     

    Do I need { } either side of the machine ID?

     

    And where do I type the comments bit??

     

    I have attached a pic.

     

    • KateAWin's avatar
      KateAWin
      Brass Contributor
      May 29, 2020

      neilcarden Sorry for the confusion, it's poorly labeled in ATP. Here is a screenshot of what it should look like before you run the query (it looks like you're entering the comment in the bottom "Response body" when it should be the top unlabeled input box):

       

       

      Thank you,
      Kate

       

       

      • Saravanan02B's avatar
        Saravanan02B
        Copper Contributor
        Jan 18, 2022

        KateAWin getting error like this 

        syntax is correct  https://api.securitycenter.microsoft.com/api/machines/ba8499873cb3a3ab58b05753b938149945c58ddf/offboard please check the screenshot and target value on the error keeps changing whenever i click run query

         

         

Resources