How to remove personal device monitoring from Microsoft Defender

Divya Kushal 5

Hi Everyone,

I need some help with removing personal device from monitoring in Microsoft Defender. I have created a tag, but unsure on applying it. There are few corporate devices which is not onboarded but bought and are in apple business manager which triggers the policy to be applied too.

Device: MAC

This is reducing the Microsoft secure score, and I would like to improve this.

Thanks,

Divya

Prathista Ilango 95 Reputation points Microsoft Employee

2024-11-08T11:21:51.3966667+00:00
Hello Divya,

How are you onboarding these devices into Defender? When you say personal devices here, I am assuming you mean "corporate" in Intune but should not be onboarded to Defender. Correct me if I am wrong.

Based on my understanding, assuming the devices are onboarded using Device configuration policy, then the following would help,

You can achieve this using Device categories.

Create a device category, say "ABM - No defender"

Assign this category to the device which is not to onboarded to Defender

Create a dynamic device group based on this device category

Exclude this group from onboarding and other Defender policies

Refer to the below links for reference,

Categorize devices into groups in Intune - Microsoft Intune | Microsoft Learn

Configure Microsoft Defender for Endpoint in Microsoft Intune | Microsoft Learn

Assign device profiles in Microsoft Intune | Microsoft Learn

Please let us know if that helps.

Thank you!

Share via

How to remove personal device monitoring from Microsoft Defender

Your answer