I've created a new test profile under Endpoint Security -> Antivirus for Defender, lets call it "AV-New". I've created a new device group called TestDevices and excluded the group from the current "AV-Current" policy.
So, AV-NEW assigned to only TestDevices and AV-Current assigned to All, excluding TestDevices.
Checking in on my AV-New policy, I can see there is a conflict.
Going to Device Status -> Selecting the Device -> Windows Defender Antivirus, I can see each setting seems to have 2 entries.
Selecting a setting with a conflict, i.e. scan emails shows two profiles assigned, AV-New and AV-Current.
The profiles/device has been in this state for over a week.
Why is this the case, even though I've excluded the device from AV-Current?
How can I remove a profile - i.e. AV-Current for this device?