Defender for Endpoint Android Scanning Scope

Question

We rolled out Defender for Endpoint on all Android devices connected to Intune. Does the Defender for Endpoint secure the whole device or does it only protect what is in the work profile? It seems to be the case that it only protects what is in the work profile. This is derived from the amount of apps it scans. There is also no documentation about this anywhere. Unfortunately this question makes or breaks the Defender for Endpoint for us because if it doesn't protect the whole device it would be useless to us.

Answer 1

@Hoffschmidt, Roman | 101 Detmold Thanks for posting in our Q&A.

For this issue, I have done a lot of research. In Microsoft Defender for Endpoint official article, it says that malware detection test and phishing test on Android Enterprise with a work profile, only the work profile is supported.
https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/mtd?view=o365-worldwide#pilot-evaluation

And Peter also said that " When using MDE for Android on a device with a Work Profile (personally-owned or corporate-owned), it will only protect everything within the Work Profile." in his blog.
https://www.petervanderwoude.nl/post/getting-started-with-microsoft-defender-for-endpoint-for-android/
Note: Non-Microsoft link, just for the reference.

Hope it will help.

---

If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.