Offboarding from Microsoft Defender for Endpoint

Microsoft Defender for Endpoint is a paid security product that extends the Microsoft Defender Antivirus product included for free in Windows with enterprise capabilities, including a full EDR product that reports security telemetry into a security operations center (SOC). Recently, some recently-retired Microsoft employees have been surprised to discover that their personal PCs that had previously been used in a BYOD (bring your own device) manner are still applying Microsoft security policies. For example, an ex-employee might see this block from Network Protection when visiting Grammarly.com: When this happens, the user is often confused, either thinking Microsoft is blocking everyone from visiting Grammarly’s website (it’s not), or realizing that it’s only their device that they previously used for work. Some users are especially confused because they know that they remembered to “offboard” their device from Microsoft, leaving the domain and/or performing Intune offboarding. The…