Onboarding tools and methods for Windows 10 devices

Important

Welcome to Microsoft Defender for Endpoint, the new name for Microsoft Defender Advanced Threat Protection. Read more about this and other updates here. We'll be updating names in products and in the docs in the near future.

Applies to:

Devices in your organization must be configured so that the Defender for Endpoint service can get sensor data from them. There are various methods and deployment tools that you can use to configure the devices in your organization.

The following deployment tools and methods are supported:

  • Group Policy
  • Microsoft Endpoint Configuration Manager
  • Mobile Device Management (including Microsoft Intune)
  • Local script

In this section

Topic Description
Onboard Windows 10 devices using Group Policy Use Group Policy to deploy the configuration package on devices.
Onboard Windows devices using Microsoft Endpoint Configuration Manager You can use either use Microsoft Endpoint Configuration Manager (current branch) version 1606 or Microsoft Endpoint Configuration Manager (current branch) version 1602 or earlier to deploy the configuration package on devices.
Onboard Windows 10 devices using Mobile Device Management tools Use Mobile Device Management tools or Microsoft Intune to deploy the configuration package on device.
Onboard Windows 10 devices using a local script Learn how to use the local script to deploy the configuration package on endpoints.
Onboard non-persistent virtual desktop infrastructure (VDI) devices Learn how to use the configuration package to configure VDI devices.

Want to experience Defender for Endpoint? Sign up for a free trial.