Uninstall/Clean-up Microsoft Defender Endpoint

Question

Hello,

We are having issues using the Quest migration tool to move our devices to another Microsoft tenant. It seems to be struggling gaining access and deleting a regkey that is link to a service for MDE. The tool is running and using the system account, we are also local admins and unable to delete/remove manually.

We have used the offboarding script but only seems to disconnect the device from the MDE portal. This doesn't uninstall or clean-up MDE from device. All of the software, services or regkeys still remain. Is there a uninstall or clean-up tool please to help fully remove Microsoft Defender Endpoint??

Services/RegKeys in question is below.

Microsoft Defender Core Service
Microsoft Defender Antivirus Service
Microsoft Defender Antivirus Network Inspection Service

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MDCoreSvc
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MDCoreSvc

Thanks,
Dan

***moved from Microsoft 365 and Office / Defender / Unknown / Windows***

Answer 1

Hello Dan Beeney,

Thank you for posting in Microsoft Community forum.

From the description above, I understand your question is related to Microsoft Defender Endpoint.

Since there are no engineers dedicated to Microsoft Defender Endpoint in this forum. in order to be able to get a quick and effective handling of your issue, I recommend that you repost your question in the Q&A forum, where there will be a dedicated engineer to give you a professional and effective reply.

Here is the link for Q&A forum.
Questions - Microsoft Q&A

Click the "Ask a Question" button in the upper right corner to post your question and type "Defender" tag and select any tags related to your productions.

I hope the information above is helpful.

If you have any question or concern, please feel free to let us know.

Best Regards,
Daisy Zhou

Answer 2

Thank you for your response, I had also posted a question there or already and now had a response. Thanks