Edit

Antivirus solution compatibility with Microsoft Defender for Endpoint

  • Article

Applies to:

Want to experience Defender for Endpoint? Sign up for a free trial.

The Microsoft Defender for Endpoint agent depends on Microsoft Defender Antivirus for some capabilities such as file scanning.

Important

Defender for Endpoint does not adhere to the Microsoft Defender Antivirus Exclusions settings.

You must configure Security intelligence updates on the Defender for Endpoint devices whether Microsoft Defender Antivirus is the active anti-malware or not. For more information, see Manage Microsoft Defender Antivirus updates and apply baselines.

If an onboarded device is protected by a third-party anti-malware client, Microsoft Defender Antivirus on that endpoint will enter into passive mode.

Microsoft Defender Antivirus will continue to receive updates, and the msmpeng.exe process will be listed as a running a service. But, it won't perform scans and doesn't replace the running third-party anti-malware client.

The Microsoft Defender Antivirus interface will be disabled. Users on the device won't be able to use Microsoft Defender Antivirus to perform on-demand scans or configure most options.

For more information, see the Microsoft Defender Antivirus and Defender for Endpoint compatibility topic.

Tip

Do you want to learn more? Engage with the Microsoft Security community in our Tech Community: Microsoft Defender for Endpoint Tech Community.