I think all this does is kill the tray app, the daemon is still running. I'm sure people have this installed by Intune, you can remove it for an hour, but it will get re-installed. This is the command: sudo '/Library/application Support/Microsoft/Defender/uninstall/uninstall'