Forum Discussion

Stephen Neil's avatar
Stephen Neil
Copper Contributor
Aug 10, 2023

MDE client "Onboarding Status" inaccurate

We are finding that even after clients have successfully run the MDE offboarding package (and they cease reporting into MDE) that the Offboarding Status column still report the device as "Onboarded". The devices do get marked as "inactive" after 7 days and will eventually age out (we have none older than 180d).

Is this the same for anyone else?

The last events on an Offboarded device timeline clearly show the offboarding script being run so I can't understand why Defender is unable to mark / process these devices as "Offboarded".

Resources