I noticed that by default the script will disable DiagTrack, however, the Citrix Optimizer Tool has a note that disabling this service might prevent Microsoft Defender ATP from working correctly. I'm not sure where they are sourcing this information from but maybe you guys have a better reason for disabling it?
The only references I can find to this service in the Defender for Endpoint documentation is if you are using a proxy server. Any insight is greatly appreciated!