@@ -1,6 +1,6 @@ --- layout: Conceptual-title: Offboard a device from Microsoft Defender for Business - Microsoft Defender for Business | Microsoft Learn+title: Offboard a Device from Microsoft Defender for Business - Microsoft Defender for Business | Microsoft Learn canonicalUrl: https://learn.microsoft.com/en-us/defender-business/mdb-offboard-devices breadcrumb_path: /defender-business/breadcrumb/toc.json feedback_system: Standard@@ -8,7 +8,7 @@ permissioned-type: public feedback_product_url: https://techcommunity.microsoft.com/t5/security-compliance-and-identity/ct-p/MicrosoftSecurityandCompliance uhfHeaderId: MSDocsHeader-MicrosoftDefender manager: bagol-description: Learn about how to remove or offboard a device from Microsoft Defender for Business.+description: Learn about how to remove or offboard devices from Microsoft Defender for Business, as devices are replace or your business needs change. author: chrisda ms.author: chrisda ms.topic: overview@@ -47,13 +47,13 @@ spProducts: platformId: e4057644-0565-0a31-a935-ff4df0839bf0 --- -# Offboard a device from Microsoft Defender for Business - Microsoft Defender for Business | Microsoft Learn+# Offboard a Device from Microsoft Defender for Business - Microsoft Defender for Business | Microsoft Learn -As devices are replaced or retired, or your business needs change, you can offboard devices from Defender for Business. Offboarding a device causes the device to stop sending data to Defender for Business, and its status changes to `Inactive` within seven days. You don't have to offboard devices that are already listed as `Inactive`.
+As you replace or retire devices, or as your business needs change, you can offboard devices from Defender for Business. When you offboard a device, it stops sending data to Defender for Business. Its status changes to `Inactive` within seven days. You don't need to offboard devices that are already listed as `Inactive`.
 
-Data from a device, such as alerts, vulnerabilities, and detected threats, remains visible in the Microsoft Defender portal until the [configured retention period](/en-us/defender-endpoint/data-storage-privacy#how-long-will-microsoft-store-my-data-what-is-microsofts-data-retention-policy) expires (usually 180 days).
+Data from a device, such as alerts, vulnerabilities, and detected threats, remains visible in the Microsoft Defender portal until the [configured retention period](/en-us/defender-endpoint/data-storage-privacy#how-long-will-microsoft-store-my-data-what-is-microsofts-data-retention-policy) expires, usually 180 days.
 
-Devices that weren't active within the last 30 days aren't factored into your organization's [exposure score](mdb-view-tvm-dashboard).
+Devices that weren't active within the last 30 days don't affect your organization's [exposure score](mdb-view-tvm-dashboard).
 
 Important
 
@@ -65,15 +65,15 @@ The procedures in this article describe how to remove a device from monitoring b 
     - **Windows 10 or 11**
     - **Mac**
-    - **Servers** (Windows Server or Linux Server)
-    - **Mobile** (for iOS/iPadOS or Android devices)
+    - **Servers**: Windows Server or Linux Server
+    - **Mobile**: for iOS/iPadOS or Android devices
 2. Follow the guidance on the selected tab.
 3. Proceed to your next steps.
 
 # [Windows 10 or 11](#tab/Windows1011)
 ## Windows 10 or 11
 
-1. Go to the Microsoft Defender portal (https://security.microsoft.com) and sign in.
+1. Go to the [Microsoft Defender portal](https://security.microsoft.com) and sign in.
 2. In the navigation pane, choose **Settings**, and then choose **Endpoints**.
 3. Under **Device management**, choose **Offboarding**.
 4. Select an operating system, such as **Windows 10 and 11**, and then, under **Offboard a device**, in the **Deployment method** section, choose **Local script**.
@@ -84,7 +84,7 @@ The procedures in this article describe how to remove a device from monitoring b # [Mac](#tab/mac)
 ## Mac
 
-1. Go to the Microsoft Defender portal (https://security.microsoft.com) and sign in.
+1. Go to the [Microsoft Defender portal](https://security.microsoft.com) and sign in.
 2. In the navigation pane, choose **Settings**, and then choose **Endpoints**.
 3. Under **Device management**, choose **Offboarding**.
 4. In the **Select operating system to start the offboarding process** list, select **macOS**.
@@ -102,27 +102,27 @@ Choose the operating system for your server: 
 ### Windows Server
 
-1. Go to the Microsoft Defender portal (https://security.microsoft.com), and sign in.
+1. Go to the [Microsoft Defender portal](https://security.microsoft.com) and sign in.
 2. In the navigation pane, choose **Settings** > **Endpoints**, and then under **Device management**, choose **Offboarding**.
 3. Select an operating system, such as **Windows Server 1803, 2019, and 2022**, and then in the **Deployment method** section, choose **Local script**.
-4. Select **Download package**. We recommend that you save the offboarding package to a removable drive. The zipped folder is named `WindowsDefenderATPOffboardingPackage_valid_until_YYYY-MM-DD.zip` (where `YYYY-MM-DD` is the expiry date of the package).
+4. Select **Download package**. We recommend that you save the offboarding package to a removable drive. The zipped folder is named `WindowsDefenderATPOffboardingPackage_valid_until_YYYY-MM-DD.zip`, where `YYYY-MM-DD` is the expiry date of the package.
 5. On your Windows Server device, extract the contents of the zipped folder to a location such as the Desktop folder.
-6. Open a command prompt as an administrator.
-7. Type the location of the script file. For example, if you copied the file to the Desktop folder, you would type `%userprofile%\Desktop\WindowsDefenderATPOffboardingScript_valid_until_2022-11-11.cmd` (where `YYYY-MM-DD` is the expiry date of the package), and then press Enter (or select **OK**).
+6. Open a Command Prompt window as an administrator.
+7. Type the location of the script file. For example, if you copied the file to the Desktop folder, type `%userprofile%\Desktop\WindowsDefenderATPOffboardingScript_valid_until_2022-11-11.cmd`, where `YYYY-MM-DD` is the expiry date of the package. Then press **Enter** or select **OK**.
 
 ### Linux Server
 
-1. Go to the Microsoft Defender portal (https://security.microsoft.com), and sign in.
+1. Go to the [Microsoft Defender portal](https://security.microsoft.com) and sign in.
 2. In the navigation pane, choose **Settings** > **Endpoints**, and then under **Device management**, choose **Offboarding**.
 3. Select **Linux Server** for the operating system, and then in the **Deployment method** section, choose **Local script**.
-4. Select **Download package**. We recommend that you save the offboarding package to a removable drive. The zipped folder is named `WindowsDefenderATPOffboardingPackage_valid_until_YYYY-MM-DD.zip` (where `YYYY-MM-DD` is the expiry date of the package).
+4. Select **Download package**. We recommend that you save the offboarding package to a removable drive. The zipped folder is named `WindowsDefenderATPOffboardingPackage_valid_until_YYYY-MM-DD.zip`, where `YYYY-MM-DD` is the expiry date of the package.
 5. On your Linux Server device, extract the contents of the zipped folder to a location such as the Desktop folder.
-6. Open a terminal, and navigate to the directory where the `MicrosoftDefenderATPOffboardingLinuxServer_valid_until_YYYY-MM-DD` file (where `YYYY-MM-DD` is the expiry date of the file) is located.
+6. Open a terminal, and navigate to the directory where the `MicrosoftDefenderATPOffboardingLinuxServer_valid_until_YYYY-MM-DD` file, where `YYYY-MM-DD` is the expiry date of the file, is located.
 7. Type `python MicrosoftDefenderATPOffboardingLinuxServer_valid_until_YYYY-MM-DD.py` in the terminal.
 
 Note
 
-This procedure offboards the server, meaning that the server stops sending security data to Defender for Business. However, it doesn't remove the Defender for Business software from the device. For information about how to completely remove the software from the device, see [Offboard or uninstall Microsoft Defender for Endpoint on Linux](/en-us/defender-endpoint/linux-off-board-endpoints).
+This procedure offboards the server, meaning that the server stops sending security data to Defender for Business. It doesn't remove the Defender for Business software from the device. For information about how to completely remove the software from the device, see [Offboard or uninstall Microsoft Defender for Endpoint on Linux](/en-us/defender-endpoint/linux-off-board-endpoints).
 
 # [Mobile devices](#tab/mobiles)
 ## Mobile devices