These are the settings that I chose and I felt made sense. Network Protection > Prevent users and apps from accessing dangerous websitesĬontrolled Folder Access > Configure Controlled folder accessĪttack Surface Reduction > Configure Attack Surface Reduction Rules Turn on process scanning whenever real-time protection is enabledĭefine the maximum size of downloaded files and attachments to be scannedĬonfigure monitoring for incoming and outgoing file and program activity Monitor file and program activity on your computer Scan all downloaded files and attachments FolderĪllow antimalware service to startup with normal priorityĪllow antimalware service to remain running alwaysĬonfigure detection for potentially unwanted applications Simply, you navigate to Computer Configuration > Administrative Templates > Windows Components > Microsoft Defender Antivirus and configure the following GPO items. Microsoft wrote a really nice article that gives you exactly what you need. The other part as mentioned above is configuring the GPO to ensure Defender is actually working and doing its job. It’s pretty basic to deploy the application, but the bigger challenge will be the GPO work afterwards.

I prefer to use the batch file deployment. It’s pretty simple to provision the Windows version of Defender. Provisioning Microsoft Defender ATP Windows Deployment This will cover both a Windows and MacOS deployment. I’m going to briefly discuss the onboarding process and some of the great value you can get inside of their console. I’m going to highlight some of the stuff that I love, which can enhance your UEM experience. One product that comes with E5 that I think is compelling is Microsoft Defender ATP.Īdopting Microsoft Defender ATP doesn’t mean you need to flip over to Intune tomorrow, but it can be a nice addition to your existing UEM environment. As I wrote recently, you may or may not be able to make the switch.

So you remember when your CIO told you that you’re buying Microsoft 365 E5 and you realized your life is over? It can be very overwhelming when you realize that you now need to switch all of your stuff over to Intune.

Microsoft defender atp mac