Hi @Zaw Myo Win
Thank you for posting your question in the Microsoft Q&A forum.
Following up on your inquiry regarding Microsoft Defender for Servers, I’d like to share some insights based on our research and Microsoft’s official documentation that may help inform your decision, particularly around transitioning from Plan 2 to Plan 1 for on-premises server protection.
According to Microsoft’s guidance and community best practices, it is indeed possible to switch from Defender for Servers Plan 2 to Plan 1 while continuing to protect on-premises servers, as long as those servers are onboarded using Azure Arc. You can find the official documentation here: Select a Defender for Servers plan – Microsoft Learn
Here is a table summarizing Microsoft Defender for Servers Plan 1 vs. Plan 2, specifically for on-premises servers using Azure Arc:
Please note that:
- Downgrading to Plan 1 does not introduce major vulnerabilities, but it does reduce the level of advanced protection.
- You cannot mix Plan 1 and Plan 2 within the same Azure subscription. If you need to use both plans, separate subscriptions are required.
- If your environment requires features like vulnerability management or file integrity monitoring, you may want to evaluate whether Plan 1 meets your security and compliance needs.
To help you get started with deployment, you can refer to the following guide: Onboard non-Azure servers with Defender for Endpoint - Microsoft Defender for Cloud | Microsoft Learn
Additionally, since our testing capabilities are limited, we recommend reaching out to Microsoft Support for more assistance. Their technical team can provide backend diagnostics, remote troubleshooting, and guidance on licensing and deployment: Customer service phone numbers - Microsoft Support
We hope the details provided will assist you effectively.
If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.