Forum Discussion

Stephen Neil's avatar
Stephen Neil
Copper Contributor
Aug 10, 2023

MDE client "Onboarding Status" inaccurate

We are finding that even after clients have successfully run the MDE offboarding package (and they cease reporting into MDE) that the Offboarding Status column still report the device as "Onboarded". The devices do get marked as "inactive" after 7 days and will eventually age out (we have none older than 180d).

Is this the same for anyone else?

The last events on an Offboarded device timeline clearly show the offboarding script being run so I can't understand why Defender is unable to mark / process these devices as "Offboarded".

microsoft defender for endpoint
onboarding

2 Replies

    • Stephen Neil's avatar
      Stephen Neil
      Copper Contributor
      Aug 10, 2023
      No I was wondering why offboarded devices still have a status as being "Onboarded" in the portal. However I now see that "Offboarded" isn't an available status when filtering devices so it's clearly not a status that is included in the product. This would be a really useful addition and I see there is a feedback request for it here. I have added my vote:
      https://feedbackportal.microsoft.com/feedback/idea/a524171b-fa0f-ee11-a81c-000d3ae5b6f4

Resources