configure windows defender with microsoft intune

#CONFIGURE WINDOWS DEFENDER WITH MICROSOFT INTUNE WINDOWS 10#

Configuration Manager clients managed through the tenant attach scenario You can also use the Endpoint protection profile for Device configuration policy to configure tamper protection for devices managed by Intune. Your existing instances of the old profile remain available to use and edit. With this change you can no longer create new versions of the old profiles.

Each new profile template for this new platform includes the same settings as the older profile template it replaces. Profiles for this new platform use the settings format as found in the Settings Catalog. These profiles also add support for the Windows Server platform which is not supported through Microsoft Intune natively. The Windows 10, Windows 11, and Windows Server platform supports devices communicating with Intune through Microsoft Intune or Microsoft Defender for Endpoint.

#CONFIGURE WINDOWS DEFENDER WITH MICROSOFT INTUNE WINDOWS 10#

Platform: Windows 10, Windows 11, and Windows Serverīeginning on April 5, 2022, the Windows 10 and later platform was replaced by the Windows 10, Windows 11, and Windows Server platform. Profiles for Antivirus policy that support tamper protection for devices managed by Microsoft Intune:

Devices are onboarded to Microsoft Defender for Endpoint (P1 or P2).

Your environment must meet the prerequisites for managing tamper protection with Intune.

Prerequisites to support tamper protection for devices managed by Intune: This includes both devices you manage with Intune, and devices you manage with Configuration Manager through the tenant attach scenario. You can use Intune to manage tamper protection on Windows devices as part of Windows Security Experience profile (an Antivirus policy). Tamper protection will enable on the first device check-in after onboarding to Microsoft Defender for Endpoint. Devices may see a delay enabling tamper protection if previously not onboarded to Microsoft Defender for Endpoint.

Windows Server 2012 R2 and Windows Server 2016 ( using the modern, unified solution)ĭevices are required to be onboarded to Microsoft Defender for Endpoint (P1 or P2).

Windows Server version 1803 or later, Windows Server 2019, Windows Server 2022.

Windows 10 and 11 (including Enterprise multi-session).

Tamper protection is available for devices that are running one of the following operating systems:

This article also includes the information about platforms supported by this capability, and the policies and profiles that those platforms support. Defender for Endpoint security settings management - To configure support for deploying antivirus policy to devices that are managed by Defender, but not enrolled with Intune, see Manage Microsoft Defender for Endpoint on devices with Microsoft Intune.Support for Microsoft Defender for Endpoint clients: To set up tenant attach, see Configure tenant attach to support endpoint protection policies. Set up of tenant attach includes configuring Configuration Manager device collections to support endpoint security policies from Intune. Set up tenant attach for Configuration Manager devices - To support deploying antivirus policy to devices managed by Configuration Manager, configure tenant attach. This scenario is in preview and requires use of Configuration Manager current branch version 2006 or later. Support for Configuration Manager clients: No additional prerequisites are required.Windows 10, Windows 11, and Windows Server Microsoft Defender for Endpoint for macOS (In the Microsoft Defender for Endpoint documentation) For Intune to manage antivirus settings on a device, Microsoft Defender for Endpoint must be installed on that device.Support for Microsoft Intune (MDM) enrolled devices: The macOS Antivirus profile replaces the need to configure the settings by using. Additionally, the settings found in the Antivirus policy for macOS aren't available through the other policy types. The additional settings can complicate the task of configuring Antivirus workload. However, those policy types include additional categories of settings that are unrelated to Antivirus.

You'll find the antivirus policies under Manage in the Endpoint security node of the Microsoft Intune admin center.Īntivirus policies include the same settings as found endpoint protection or device restriction templates for device configuration policy. Each profile contains only the settings that are relevant for Microsoft Defender for Endpoint antivirus for macOS and Windows devices, or for the user experience in the Windows Security app on Windows devices. Intune Endpoint security Antivirus policies can help security admins focus on managing the discrete group of antivirus settings for managed devices.Īntivirus policy includes several profiles.

Configure windows defender with microsoft intune