Forum Discussion
Solved
Remove devices from MDATP portal
We have a couple of devices that are showing in MDATP which we would like to get rid of, however we are not in a position to run any scripts... One was registered in InTune by mistake and has been u...
neilcarden Sorry for the confusion, it's poorly labeled in ATP. Here is a screenshot of what it should look like before you run the query (it looks like you're entering the comment in the bottom "Response body" when it should be the top unlabeled input box):
Thank you,
Kate
KateAWin Thanks again for responding however I am a bit confused.
So I am running this query (not real machine id)
https://api.securitycenter.windows.com/api/machines/aaf12345677955b102547d22ff302/offboard
Do I need { } either side of the machine ID?
And where do I type the comments bit??
I have attached a pic.
neilcarden Sorry for the confusion, it's poorly labeled in ATP. Here is a screenshot of what it should look like before you run the query (it looks like you're entering the comment in the bottom "Response body" when it should be the top unlabeled input box):
Thank you,
Kate
KateAWin getting error like this
syntax is correct https://api.securitycenter.microsoft.com/api/machines/ba8499873cb3a3ab58b05753b938149945c58ddf/offboard please check the screenshot and target value on the error keeps changing whenever i click run query
Has anyone tried scripting this if you have multiple devices you want to offload?
In MDATP portal i have 140 inactive machines which are actually one pc with name conf-04, it have different Device Id, this 140 machines was created from 01.01.2021 17:34 to 10.01.2021 2:53
i tried to use offboard via API but get error :{ "error": { "code": "ResourceNotFound", "message": "Machine {machine id} was not found.", "target": "9ccde3bd-f5ca-4fa4-b21e-f45ab59fd6ff" } }Data Retention now 30 days but this inactive machines is in list.
How to remove this machines? And how this computer created so much copies with different device id?
Thanks!
- Just reinstalled OS on this machine, gave same name , and all 140 inactive machines was disappeared. Only one active machine now. So problem is solved.
KateAWin Thank you that worked a charm... well the command did, just need to see if it actually offboards it now! 🙂
Thanks
Neil
