Problems offboarding Win 10 cliente from Defender ATP

%3CLINGO-SUB%20id%3D%22lingo-sub-313130%22%20slang%3D%22en-US%22%3EProblems%20offboarding%20Win%2010%20cliente%20from%20Defender%20ATP%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-313130%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAs%20I'm%20accustomed%20to%20testing%20using%20trial%20tenants%20from%20demos.microsoft.com%2C%20it%20seemed%20natural%20for%20me%20to%20play%20with%20Defender%20ATP%20using%20a%20demo%20tenant.%3C%2FP%3E%3CP%3EHowever%2C%20I%20onboarded%20my%20machine%20around%206%20months%20ago%20and%20when%20I%20opened%20a%20new%20demo%20with%20a%20new%20tenant%2C%20I%20found%20my%20PC%20wasn't%20registering%20in%20the%20new%20Defender%20ATP%20console.%20Lo%20and%20behold%2C%20the%20registry%20still%20has%20the%20old%20OrgID%20associated%2C%20and%20I%20don't%20have%20access%20to%20the%20old%20offboarding%20script%20in%20the%20old%20tenant.%3C%2FP%3E%3CP%3EIs%20there%20a%20way%20to%20force%20the%20offboarding%20of%20the%20computer%20without%20having%20acces%20to%20the%20tenant%3F%20This%20is%20a%20real%20problem%20for%20me%20when%20I%20want%20to%20demo%20ATP%20with%20customers.%3C%2FP%3E%3CP%3EThanks!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1040275%22%20slang%3D%22en-US%22%3ERe%3A%20Problems%20offboarding%20Win%2010%20cliente%20from%20Defender%20ATP%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1040275%22%20slang%3D%22en-US%22%3E%3CP%3EStuck%20in%20same%20state%20myself.%20Let%20me%20know%20if%20you%20figure%20out%20how%20to%20do%20it.%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F30617%22%20target%3D%22_blank%22%3E%40John%20Marshall%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1299248%22%20slang%3D%22en-US%22%3ERe%3A%20Problems%20offboarding%20Win%2010%20cliente%20from%20Defender%20ATP%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1299248%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F30617%22%20target%3D%22_blank%22%3E%40John%20Marshall%3C%2FA%3E%26nbsp%3BI%20see%20this%20is%20an%20old%20post%20but%20I%20ran%20into%20the%20same%20issue%20because%20we%20ran%20a%20free%20eval%20two%20years%20ago.%26nbsp%3B%20This%20year%20we%20upgraded%20to%20MS%20365%20E5%20and%20I%20cannot%20onboard%20the%20machines%20I%20used%20in%20the%20eval%20as%20they%20are%20reporting%20to%20an%20old%20OrgID.%26nbsp%3B%20Surprised%20not%20to%20see%20an%20answer%20to%20this.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1602338%22%20slang%3D%22en-US%22%3ERe%3A%20Problems%20offboarding%20Win%2010%20cliente%20from%20Defender%20ATP%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1602338%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F30617%22%20target%3D%22_blank%22%3E%40John%20Marshall%3C%2FA%3E%26nbsp%3B%20I%20ended%20up%20contacting%20support%20and%20after%20a%20couple%20of%20days%20of%20running%20diagnostics%20and%20providing%20the%20results%2C%20they%20sent%20me%20an%20new%20offboarding%20script%20that%20appears%20to%20have%20successfully%20removed%20the%20expired%20OrgID.%26nbsp%3B%20%26nbsp%3BFWIW%2C%20this%20entire%20process%20is%20way%20to%20cumbersome%20and%20there%20is%20a%20general%20lack%20of%20clear%20documentation%2C%20especially%20when%20trying%20to%20combine%20with%20onboarding%20InTune%20and%20then%20ATP%20from%20the%20InTune%20devices.%26nbsp%3B%20Oh%20well%2C%20it%20helps%20to%20remind%20me%20why%20I%20am%20looking%20forward%20to%20retirement!%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Contributor

Hi,

 

As I'm accustomed to testing using trial tenants from demos.microsoft.com, it seemed natural for me to play with Defender ATP using a demo tenant.

However, I onboarded my machine around 6 months ago and when I opened a new demo with a new tenant, I found my PC wasn't registering in the new Defender ATP console. Lo and behold, the registry still has the old OrgID associated, and I don't have access to the old offboarding script in the old tenant.

Is there a way to force the offboarding of the computer without having acces to the tenant? This is a real problem for me when I want to demo ATP with customers.

Thanks!

3 Replies

Stuck in same state myself. Let me know if you figure out how to do it.@John Marshall 

@John Marshall I see this is an old post but I ran into the same issue because we ran a free eval two years ago.  This year we upgraded to MS 365 E5 and I cannot onboard the machines I used in the eval as they are reporting to an old OrgID.  Surprised not to see an answer to this.

@John Marshall  I ended up contacting support and after a couple of days of running diagnostics and providing the results, they sent me an new offboarding script that appears to have successfully removed the expired OrgID.   FWIW, this entire process is way to cumbersome and there is a general lack of clear documentation, especially when trying to combine with onboarding InTune and then ATP from the InTune devices.  Oh well, it helps to remind me why I am looking forward to retirement!