Microsoft Defender for Endpoint Security settings management and Configuration Manager

Question

Hello all,

we have several servers in Azure managed by Config Manager for Security updates and now also for the Endpoint protection (AV Defender updates, Antimalware policy, Endpoint Protection).

All servers are onboarded in the MDE portal with MDE client (Windows and Linux servers). Our intention is to explore the potential of utilizing the MDE Portal and Intune to manage security congis (AV policy in particular) for all devices (Windows and Linux servers). The question is if we can continue to use ConfigManager to manage security updates for Windows clients and move all security configs using MDE and Intune portal? Is it possible to have this hybrid configuration?

Obviously, we will configure and pla all settings following this link https://learn.microsoft.com/en-us/defender-endpoint/mde-security-settings-management

Thank you

Answer 1

If the servers are already onboarded to Defender then sensor is already checking in with Defender cloud service. You should able to setup security configuration management in Defender portal, integrate with Intune through the MDE connector, tag the servers in Defender portal, setup and assign the policies using Intune. You may have to remove the EP client from the servers for Intune to take over.