Defender for Server Policies

Question

Hello

For servers that are onboarded to Defender for Cloud and have the server plan activated, are the AV policies controlled from the Endpoint security policies?

Can Servers have endpoint security policies pushed to them, even if they are not onboarded to Intune?

Answer 1

Hi @berketjune2012 ,

Yes, the antivirus policies are controlled from the Endpoint security policies. This is noted here: https://learn.microsoft.com/en-us/mem/intune/protect/endpoint-security-antivirus-policy

If servers are not onboarded to Intune, they cannot have endpoint security policies pushed to them since these are a feature of Intune. https://learn.microsoft.com/en-us/mem/intune/protect/endpoint-security

Let me know if this addresses your question.

If the information helped you, please Accept the answer. This will help us as well as others in the community who may be researching similar questions.

Answer 2

Hi Berketjune,

The settings in the Defender portal is a good start for the Defender settings.

Intune will provide a more granular approach to policy configuration.

And of course powershell and Group Policy are other options.

https://learn.microsoft.com/en-us/microsoft-365/security/defender-business/mdb-configure-security-settings?view=o365-worldwide

https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/how-to-manage-microsoft-defender-on-windows-server-via-intune/ba-p/3713195

https://techcommunity.microsoft.com/t5/microsoft-defender-for-cloud/deploying-and-managing-microsoft-defender-for-cloud-as-code/ba-p/3649653