Forum Discussion
Delete devices from Inventory in Defender Security Portal
There are some obsolete devices that are removed from AD and Azure AD, but noticed these devices are not removed from Defender Security Portal.
As per the Support, there is no option to remove them as it will only be removed based on retention period.
Can Microsoft provide an option to delete computers from inventory in the Defender security Portal like they provide access to delete in Azure AD or Intune
- EricStarker
Community Manager
Hello! You've posted your question in the Tech Community Discussion space, which is intended for discussion around the Tech Community website itself, not product questions. I'm moving your question to the Microsoft 365 Defender space - please post Microsoft 365 Defender questions here in the future.
(If I am incorrect in my assumption of which Defender you are speaking about, the other Defender products are represented here: https://techcommunity.microsoft.com/t5/security-compliance-and-identity/ct-p/MicrosoftSecurityandCompliance)
- Microsoft doesn't provide the ability to remove devices because it's extremely dangerous. If an attacker would get permissions on your cloud instances, he could remove all his tracks. The devices are retained for forensic purposes.
Best option is to tag an offboarded machine and create an 'Inactive' machine group for it Or run the offboarding script on the device if possible.
