How to change the tenant of Microsoft Defender for Endpoint

[tarosrcm]

Hi, 

I have 2 accounts, aaa.onmicrosoft.com and bbb.onmicrosoft.com, and some Windows PCs already installed MS Defender for Endpoint and can see the device name on the management console with aaa.onmicrosoft.com account.

I would like to change the account to bbb.onmicrosoft.com but I can't do it at this time.

I installed MS Defender for Endpoint by using the local script as an onboarding from aaa.onmicrosoft.com and re-installed MS Defender for Endpoint again by using the local script from bbb.onmicrosoft.com.

After re-installing, the PCs are still seen on the management console with the aaa.onmicrosoft.com account.

What should I do about this? Should I uninstall it by using off-boarding process before re-install?

Best regards,

[#2 · Accepted solution]

You need to offboard the devices in the first tenant. Please use the script referenced here, or a GPO or other item. https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/offboard-machines?view=o36...

then you can onboard to the new one.

[#3]

@cberon Thank you for your proper answer! It is clear to me.