Getting Started with Microsoft Defender for Endpoint: Onboarding via Intune

Learn how to onboard Windows 10 Machines onto Microsoft Defender for Endpoint with Intune!

Sources:
Onboard to MDE via Intune

Onboard to MDE (Other Methods)

[jaymarks]

Thank you very much! The best most clear video I have seen on setting this up.

[andrewmccallum]

Thanks, really well laid out step by step guide, thanks!

[qbqsbyb]

Great walkthrough - Maybe it is also worth mentioning that for onboarding MacOS to MDE incl. Purview (Endpoint dip) would require a few deployments of config profiles to configure the accessibility, FDA, and background service permissions to Defender for Endpoint in order to for example enable the DLP sensor.

[MoonV]

Hi there, first of all great video. Helps me with connecting the MDE and MEM. Now i already enrolled a device in MEM but in MDE it does not show up in MDE. Do you have any idea why is that?

[Thatinfosecguy]

Hi,
Awesome Video.
Question- Do you use the configuration profiles to set ASR rules or can you use endpoint security?
Which one will pull through to the security portal if in audit mode?
ASR rules set from within Endpoint security - or if ASR rules are set to audit in a configuration profile?
and if they are handled differently, which would you recommend?

Thanks in advance!

[WithSajan]

Thanks the explaining in detail. What license the users have to be for end point management to work ? Or just get defender license and assigning just it to the admin profile will do the needful ?

[unkownuser]

If sophos antivirus is installed still we can use onboard logic and how to perform with sccm 2) how to deploy windows 10 defender parches or definition via SCCM it is called EDR and endpoint protection role has to be installed to deploy windows 10 defender parches or definition via SCCM

[josephdenice]

Awesome video! We are in the process of moving off Trend Micro and plan to move over to using this for our AV and security software. Do you have any suggestions on where I can also find information on how other's may have migrated off another security product onto MDE?

[Ktmine]

Hi, thank you for the video!
Question: What is the difference between this Configuration Policy you created and the EDR onboarding policy you can create with the setting "Auto from Connector"?

Another Question:
If I onboard devices from Intune to MDE, are the devices fully integrated to Microsoft Defender for Endpoint? Can I manage the Security just from Defender for Endpoint if I want to?
When should / can I use the Security Settings in Intune and when should / can I use the settings in the Defender for Endpoint?

What exactly is the difference in capabilities between an Intune managed device onboarded to MDE and a device directly onboarded to MDE? I am quite confused why you can manage the security settings on both ends..

[Dhkan]

Hello, just got a Defender for Endpoint P2 licence for my lab, however I cannot see "Endpoints" in the settings of the Microsoft 365 Center, does it take long time to appear after I populated the licence to a user ?

[Histoire-de-Star]

Hello, I have a problem with Intune defender, it detects the virus but it doesn't remove it even though the threat is serious and I have configured the Policy correctly, can you help me please? I've been looking for more than one but I can't find anything.

[system]

Awesome Video. I have a Question.

What is the difference beetwen Microsoft Defender For Endpoint and Microsoft Defender For Business?
And Which one is the best?

[TK-lewd]

Does this work exactly this way with hybrid joined devices?

[pythonblac]

Thank you, i've been stuck in the Microsoft documentation that keeps sending you in a loop of links that end up in the same place, whoever does those documentations at Microsoft should just learn to get to the damn point.