This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(80, 91%, 17%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA8%3C/text%3E%3C/svg%3E)
Hi,
We have a subscription that is dedicated to Azure Virtual Desktop. In Defender for Cloud the Servers Plan 2 has been enabled. Now looking here https://learn.microsoft.com/en-us/azure/defender-for-cloud/faq-defender-for-servers#what-s-this--mde-windows-----mde-linux--extension-running-on-my-machine- it is stated:
Defender for Cloud automatically deploys the extension to machines running:
· Windows 10 on Azure Virtual Desktop.
Now if I check any of the AVD’s under extensions they DO have the extension
However, I just don’t see the devices in https://security.microsoft.com/ ….
AFAIK the extension is responsible for the onboarding process, I assume that Windows 10 should have AV/EDR Defender already built-in and nothing needs to be installed before. If I go and look for onboarding for Windows 10 devices it tells me to download the onboarding package ONLY.
What am I missing ?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(281.6, 17%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EGM%3C/text%3E%3C/svg%3E)
@AdamBudziski-8216 Thank you for reaching out to us and providing detailed description of the issue. As I understand you are trying to onboard Windows 10 devices (part of AVD) to MDE.
Just wanted to check if you have review the below docs for integration to MDE from Defender for Cloud.
https://learn.microsoft.com/en-us/azure/defender-for-cloud/integration-defender-for-endpoint - Review the supported environments section
https://learn.microsoft.com/en-us/azure/defender-for-cloud/episode-sixteen
https://learn.microsoft.com/en-us/azure/defender-for-cloud/enable-defender-for-endpoint - if the steps defined here are followed, Microsoft Defender for Cloud will automatically onboard your machines to Microsoft Defender for Endpoint. Onboarding might take up to 12 hours. Second screenshot in the query which you shared is the manually process of onboarding Windows 10/11 devices to MDE.
Let me know if you have any further questions, feel free to post back.
@AdamBudziski-8216 Just checking in to see if above information was helpful. If you have any further updates on this issue, please feel free to post back.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(182.40000000000003, 91%, 27%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EOR%3C/text%3E%3C/svg%3E)
Hello!
If you have the status "Provisioning succeeded" - it means that Defender was installed on your server. This MDE.Windows extension initiates Defender installation, is responsible for the onboarding process, and checks of health status of Defender. Then you should see the server in https://security.microsoft.com/, if not, then check on the firewall if the server can connect to Microsoft services and check the server's network configuration. Most likely the problem is with the network or with the DNS name (maybe you onboarded this server to Microsoft EDR with another hostname).
There is no need to download and run the onboarding configuration package if the status of MDE.Windows is successful. You are right, the onboarding package in the Microsoft Defender portal simply configures the Defender and binds this device to your tenant.
You can also check the status of Defender from Powershell via commands: Get-MpPreference and Get-MpComputerStatus.
If the above response was helpful, please feel free to "Accept as Answer" and click "Yes" so it can be beneficial to the community.