How to offboard a mac?

%3CLINGO-SUB%20id%3D%22lingo-sub-2364176%22%20slang%3D%22en-US%22%3EHow%20to%20offboard%20a%20mac%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2364176%22%20slang%3D%22en-US%22%3E%3CP%3EThere%20doesn't%20seem%20to%20be%20a%20way%20to%20offboard%20a%20mac.%20Removed%20the%20application%20on%20the%20mac%20and%20it%20still%20shows%20as%20Active%20in%20Device%20Inventory%20and%20%22Onboarded%22%20in%20Onboarding%20status.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20API%20does%20not%20allow%20you%20to%20offboard%20a%20mac%20device%20either.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2398828%22%20slang%3D%22en-US%22%3ERe%3A%20How%20to%20offboard%20a%20mac%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2398828%22%20slang%3D%22en-US%22%3Esudo%20'%2FLibrary%2FApplication%20Support%2FMicrosoft%2FDefender%2Funinstall%2Funinstall'%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fsecurity%2Fdefender-endpoint%2Fmac-resources%3Fview%3Do365-worldwide%23uninstalling%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fsecurity%2Fdefender-endpoint%2Fmac-resources%3Fview%3Do365-worldwide%23uninstalling%3C%2FA%3E%3C%2FLINGO-BODY%3E
New Contributor

There doesn't seem to be a way to offboard a mac. Removed the application on the mac and it still shows as Active in Device Inventory and "Onboarded" in Onboarding status.

 

The API does not allow you to offboard a mac device either.

 

 

3 Replies
sudo '/Library/Application Support/Microsoft/Defender/uninstall/uninstall'
https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/mac-resources?view=o365-wo...
From what I see that just uninstalls the client. It doesn't seem to offboard and the status in ATP is still onboarded.
after some time the old machine will be shown as inactive and then as per the retention period you set on the portal, the device will be removed.