Defender for Endpoint License Assignments

Nikhil Satyakrishna 0 Reputation points
2024-09-19T08:55:08.2166667+00:00

Hi all,

We're in the process of onboarding all our endpoints into Microsoft Defender for Endpoint and have acquired the necessary licenses for our devices. However, our organization doesn't currently use Entra ID (formerly Azure AD) for user management, and we're not syncing our on-premises Active Directory to the cloud. As a result, we can't assign the Defender for Endpoint licenses to individual users in the traditional way.

Is it a strict requirement to assign these licenses to users in Entra ID, or can we remain compliant with our licensing terms by simply having the correct number of licenses for our devices without user assignment?

Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,392 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Andrew Blumhardt 9,861 Reputation points Microsoft Employee
    2024-09-25T12:31:29.89+00:00

    You have an Entra ID tenant, you just don't know it. Entra is a prerequisite to the Defender XDR portal. You can use entra.microsoft.com or the Azure portal to explore. You should find your E5 licenses in the portal under Entra > licensing.

    MDE does not perform license validation. Your end-user devices are part of the E3 or E5 license. These is a separate license for Windows and Linux servers. You can purchase a stand-alone license for servers for a reseller or used Defender for Servers (which includes MDE).

    Entra is also required for Office 365 and Intune.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.