MS Defender agent uninstalling - Complete #help

Question

Hello Community

I have a VM where a 3rd party AV is installed , previously we were using MS defender endpoint but it was giving pain for redhat machines.

Problem : I have a win10 VM where i have uninstalled the MDE agent from extension . but end user is complaining that service is still running and cannot be stop since its grey out.
I search the machine in security.microsoft.com and it was showing ACTIVE status , it means defender is still on but i dont see it in the extension pane .
In extension pane i can only see 3 Extension : 1 ) domainjoin 2) DSCMicrosoft.Powershell.DSC2. 3)MicrosoftMonitoringAgent

i need to remove the defender endpoint completely from this win10 machine.

Regards

Answer 1

@alta94 Thank you for reaching out to us. As I understand you want to offboard/remove defender for endpoint from windows 10 VM.

There is a process to offload the VM, which is documented here - Offboard devices using a local script, wanted to check if you have followed this.

Let me know if you have any further questions.