Hello All,

We have onboarded devices to MDE in a setup as follows,

1. Onboard devices to Entra as hybrid entra joined devices
2. Sync/Enroll devices to Intune from on-premise SCCM through co-management config.
3. Onboard devices to MDE from Intune through EDR policy.

Once the device are onboarded, how can we do the following,

1. Disable DFE on a device (to disable protection while troubleshooting. Can we just stop the services?)
2. Uninstall DFE from a device (offboarding through a script would also remove all the policies applied to the device immediately?)

Please guide.

​Hello All,We have onboarded devices to MDE in a setup as follows,1. Onboard devices to Entra as hybrid entra joined devices2. Sync/Enroll devices to Intune from on-premise SCCM through co-management config.3. Onboard devices to MDE from Intune through EDR policy. Once the device are onboarded, how can we do the following,1. Disable DFE on a device (to disable protection while troubleshooting. Can we just stop the services?)2. Uninstall DFE from a device (offboarding through a script would also remove all the policies applied to the device immediately?)Please guide.  Read More

​