SCCM Clients installed on Virtual Desktops duplicated in Defender Portal

Copper Contributor



We have Citrix Virtual Desktops with the Config Manager Client installed that are Azure joined. In the Microsoft 365 Defender Portal the devices keep duplicating themselves. There are non-persistent machines and I suspect that whenever they are updated from the master image that is it causing this to occur. In the Configuration Manager Server console these machines are not duplicated and only appear once.


Looking for suggestions or recommendations on how to go about preventing this from occurring.


Thank you,




4 Replies

There is a setting in defender>settings>endpoint that addresses duplicate objects. Have you turned it on?

Hello Rahul, if you happen to know where that setting exists can you please point me in the direction? Cannot seem to locate that setting.
Apparently there is a setting to hide duplicate device records. Not sure if that is what you were referring to.
The hiding of duplicate device records is enabled. Not sure if that is the one.