Delet VM Security Center

Question

Hello good night, can you help me.

I have several VMs with ATP which are reflected in the Security Center of the portal, currently some VMs have been damaged (inaccessible), now I want to remove it from the Security Center list and I do not see options to carry out this action.

Can someone support me on how I delete a VM from Security Center ...

I appreciate your help, thank you very much: D

Answer 1

Hi,

You only need to follow the "Disable monitoring and keep the workspace" in https://learn.microsoft.com/en-us/azure/azure-monitor/insights/vminsights-optout

Disable monitoring and keep the workspace

1. Sign in to the Azure portal.
2. In the Azure portal, select Virtual Machines.
3. From the list, select a VM.
4. On the left, select Extensions. On the Extensions page, select DependencyAgent.
5. On the extension properties page, select Uninstall.
6. On the Extensions page, select MicrosoftMonitoringAgent. On the extension properties page, select Uninstall.

Good luck.
Ken

Answer 2

Hopefully these links will help you.

https://learn.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/configure-server-endpoints#offboard-servers

https://social.technet.microsoft.com/Forums/en-US/e76ef514-9b52-4e1a-aaf6-451b7d26476c/how-to-delete-a-machine-client-in-windows-defender-atp?forum=WindowsDefenderATPPreview