We recommend using Microsoft Endpoint Manager, which includes Microsoft Intune (Intune) to manage your organization’s threat protection features for devices (also referred to as endpoints). Learn more about Endpoint Manager. This article describes how to find your Microsoft Defender for Endpoint settings in Intune, and lists various tasks you can perform. Find your Microsoft Defender for Endpoint […]
After you have moved from your previous endpoint protection and antivirus solution to Microsoft Defender for Endpoint, your next step is to manage your features and capabilities. We recommend using Microsoft Endpoint Manager, which includes Microsoft Intune and Microsoft Endpoint Configuration Manager, to manage your organization’s devices and security settings. However, you can use other tools/methods, such as Group Policy […]
Onboard devices to Microsoft Defender for Endpoint Go to the Microsoft 365 Defender portal (https://security.microsoft.com) and sign in. Choose Settings > Endpoints > Onboarding (under Device management). In the Select operating system to start onboarding process list, select an operating system. Under Deployment method, select an option. Follow the links and prompts to onboard your organization’s devices. Need help? See Onboarding methods (in this article). Note If […]
Reinstall/enable Microsoft Defender Antivirus on your endpoints On certain versions of Windows, Microsoft Defender Antivirus was likely uninstalled or disabled when your non-Microsoft antivirus/antimalware solution was installed. When endpoints running Windows are onboarded to Defender for Endpoint, Microsoft Defender Antivirus can run in passive mode alongside a non-Microsoft antivirus solution. To learn more, see Antivirus protection […]
Get and deploy updates across your organization’s devices As a best practice, keep your organization’s devices and endpoints up to date. Make sure your existing endpoint protection and antivirus solution is up to date, and that the operating systems and apps your organization is also have the latest updates. Doing this now can help prevent […]
When you make the switch to Defender for Endpoint, you begin with your non-Microsoft antivirus/antimalware protection in active mode. Then, you configure Microsoft Defender Antivirus in passive mode, and onboard your devices to Defender for Endpoint. Next, you configure your endpoint protection features, set Microsoft Defender Antivirus to active mode, and verify that everything is […]
Migration guides If you’re considering moving to Defender for Endpoint, we have guidance to help. In the following table, review the scenarios. Select the scenario that best represents your situation, and see the recommended guidance. MIGRATION GUIDES Scenario Guidance You don’t have an endpoint protection solution in place yet, and you want to know more […]
This article is part of the Deployment guide and acts as an example onboarding method. In the Planning topic, there were several methods provided to onboard devices to the service. This topic covers the cloud-native architecture. Diagram of environment architectures While Defender for Endpoint supports onboarding of various endpoints and tools, this article does not cover them. […]
This article is part of the Deployment guide and acts as an example onboarding method. In the Planning topic, there were several methods provided to onboard devices to the service. This topic covers the co-management architecture. Diagram of environment architectures While Defender for Endpoint supports onboarding of various endpoints and tools, this article does not cover them. […]
Deploying Microsoft Defender for Endpoint can be done using a ring-based deployment approach. The deployment rings can be applied in the following scenarios: New deployments Existing deployments New deployments A ring-based approach is a method of identifying a set of endpoints to onboard and verifying that certain criteria is met before proceeding to deploy the […]