HP Wolf Security

Question

I am having a terrible time removing HP Wolf Security from 4 of the endpoints I manage, it either repairs or will not remove in the first place. I need defender to be primary and I need to get these computers from showing as non-compliant. Please help.

Answer 1

HP Wolf Security is a third‑party endpoint protection product. The provided context only covers:

• How to migrate from non‑Microsoft AV to Microsoft Defender for Endpoint when the third‑party product interferes.
• General guidance on not running multiple AV products at the same time.

From the context, the only supported and safe approach is:

1. Do not run HP Wolf Security and Microsoft Defender Antivirus actively at the same time, as this can cause instability and non‑compliance:
   • Using more than one antivirus or antispyware program at the same time can cause decreased performance, instability, or restarts.
2. Ensure Microsoft Defender Antivirus is enabled and set to the correct mode for Defender for Endpoint:
   • When migrating from a non‑Microsoft antivirus to Microsoft Defender for Endpoint, configure Microsoft Defender Antivirus in passive or active mode as required by the Defender for Endpoint deployment.
   • If the third‑party AV is blocking Defender on Windows Server, add Defender for Endpoint components to the exclusion list in the third‑party product so Defender can run.
3. Remove or fully disable the third‑party antivirus product:
   • Use Start > Settings > Apps to uninstall unwanted antimalware software.
   • After uninstalling, verify that Microsoft Defender Antivirus is enabled and Windows Firewall is turned on.
   • If the third‑party security software does not uninstall completely, contact the vendor’s technical support for a clean‑up/uninstall tool.
4. For Intune compliance:
   • Once HP Wolf Security is removed or fully disabled and Microsoft Defender Antivirus is running in the intended mode, re‑evaluate compliance from Intune.
   • If devices are still temporarily non‑compliant while fixing AV, use a grace period in the compliance policy (Actions for noncompliance → “Mark device noncompliant” after N days) so devices are not immediately blocked while remediation is in progress.

Because the context does not contain HP‑specific removal steps, any deeper removal (registry cleanup, vendor tools) must be done following HP’s official guidance or support.

---

References:

• Troubleshooting issues when migrating to Microsoft Defender for Endpoint
• Protect my PC from viruses
• Incorrect compliance status reported for Windows 10 devices with firewall enabled