Hello,

We are having issues using the Quest migration tool to move our devices to another Microsoft tenant. It seems to be struggling gaining access and deleting a regkey that is link to a service for MDE. The tool is running and using the system account, we are also local admins and unable to delete/remove manually.

We have used the offboarding script but only seems to disconnect the device from the MDE portal. This doesn’t uninstall or clean-up MDE from device. All of the software, services or regkeys still remain. Is there a uninstall or clean-up tool please to help fully remove Microsoft Defender Endpoint??

Services/RegKeys in question is below.

Microsoft Defender Core Service
Microsoft Defender Antivirus Service
Microsoft Defender Antivirus Network Inspection Service

HKEY_LOCAL_MACHINESYSTEMControlSet001ServicesMDCoreSvc
HKEY_LOCAL_MACHINESYSTEM\CurrentControlSetServicesMDCoreSvc

Thanks,
Dan

​Hello, We are having issues using the Quest migration tool to move our devices to another Microsoft tenant. It seems to be struggling gaining access and deleting a regkey that is link to a service for MDE. The tool is running and using the system account, we are also local admins and unable to delete/remove manually. We have used the offboarding script but only seems to disconnect the device from the MDE portal. This doesn’t uninstall or clean-up MDE from device. All of the software, services or regkeys still remain. Is there a uninstall or clean-up tool please to help fully remove Microsoft Defender Endpoint?? Services/RegKeys in question is below. Microsoft Defender Core ServiceMicrosoft Defender Antivirus ServiceMicrosoft Defender Antivirus Network Inspection Service HKEY_LOCAL_MACHINESYSTEMControlSet001ServicesMDCoreSvcHKEY_LOCAL_MACHINESYSTEM\CurrentControlSetServicesMDCoreSvc Thanks,Dan  Read More

​