Microsoft Windows Defender/End Point Protection with Out SCCM

Question

Hi Everyone,
To deploy windows defender /End Point Protection on Client Computer does we have to deploy complete SCCM or is there any way to deploy and manage windows defender antivirus to client computer/ Servers without purchasing SCCM License.

Thanks....

Answer 1

Also, Windows Defender is already included in all versions of Windows 10 and Windows Server 2016 and above. If you are managing Windows Server 2012 or 2012 R2 and require System Center Endpoint protection, then yes, you must license ConfigMgr for these client systems to my knowledge.

Answer 2

You can manage defender with GPO, CM or Intune. So you dont need to buy CM for that.

Answer 3

To use Microsoft Defender for Endpoint with Intune, you must have the following subscriptions:
• Microsoft Defender for Endpoint - This subscription provides you access to the Microsoft Defender Security Center (ATP portal).
Common options that include a Microsoft Defender for Endpoint license:
o Microsoft 365 E5
o Windows 10 Enterprise E5 (This license is included with Microsoft 365 E5)
For more information, see Licensing requirements in Minimum requirements for Microsoft Defender for Endpoint.
• Microsoft Intune – This subscription provides access to Intune and the Microsoft Endpoint Manager admin center.
Common options that include a Microsoft Intune license:
o Microsoft 365 Business Premium
o Microsoft 365 E3
o Microsoft 365 E5
o Enterprise Mobility + Security E3
o Enterprise Mobility + Security E5
For more information, see Microsoft Intune licensing.

For the deployment guide, see: https://learn.microsoft.com/en-us/mem/intune/protect/advanced-threat-protection-configure

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.