Device shows one time as onboarded and more than 40 times as can be onboarded

[carlicht]

Hi all,

in our environment one device is shows as onborded 1 time and more than 40 times as can beonboarded. The date under can be onbarded is always the same. How could we avoid that devices are showing onbarded and can be onborded? The data retention is set to 180 days.

thanks for your help

[#2]

Hi carlicht,

I want to let you know that at various customers, we are experiencing the same behavior. Currently, I'm excluding the duplicate devices and set my 'Devices' filter to 'Exclusions == No'. I'm also investigating this 'problem'. With retention set to 180 days, the excluded devices will be removed when the retention period is reached.

I have not found a solution yet, so I will follow this thread with interest.

[#3]

@carlicht and @Tiennes, please open a Microsoft support ticket (case) for us to investigate.
Please have the following data from one of the machines aka.ms/MDEClientAnalyzer
For more information about the MDE Client Analyzer diagnostic tool:
https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/overview-client-analyzer?v...

Thank you,
Yong Rhee - MSFT