6 docs tagged with "windows"

Defender Antivirus settings that matter in the Intune Antivirus profiles, active versus passive versus EDR in block mode, and how tamper protection locks them down on Windows and macOS.

The 19 ASR rules with GUIDs, modes and OS support, how to roll them out audit to warn to block, per-rule and global exclusions, and where to read the results.

How Cloud Discovery builds a shadow IT inventory from Defender for Endpoint, log collectors and snapshot uploads, how risk scoring and the Unsanctioned and Monitored tags turn into MDE network protection indicators, and how to verify and troubleshoot the block path.

Onboard Windows Server 2012 R2 through 2025 straight to Defender for Endpoint with the unified agent, the built-in sensor, local script, Group Policy, Configuration Manager or the Defender deployment tool, without Azure or Defender for Cloud in the path.

Every action on a Defender portal device page, what it does, what it needs, OS support and how to undo it, then Live Response in depth with the command set, library, limits and the API.

Push Defender AV, EDR, firewall and ASR policy from Intune or the Defender portal to devices that are onboarded to MDE but not enrolled in Intune, using synthetic Entra device objects and the MDE-Management tag.