Onboard non-Windows machines

Applies to:

Want to experience Microsoft Defender ATP? Sign up for a free trial.

Microsoft Defender ATP provides a centralized security operations experience for Windows as well as non-Windows platforms. You'll be able to see alerts from various supported operating systems (OS) in Microsoft Defender Security Center and better protect your organization's network.

You'll need to know the exact Linux distros and macOS versions that are compatible with Microsoft Defender ATP for the integration to work.

Onboarding non-Windows machines

You'll need to take the following steps to onboard non-Windows machines:

  1. Select your preferred method of onboarding:

    • For macOS devices, you can choose to onboard through Microsoft Defender ATP or through a third-party solution. For more information, see Microsoft Defender ATP for Mac.

    • For other non-Windows devices choose Onboard non-Windows machines through third-party integration.

      1. In the navigation pane, select Interoperability > Partners. Make sure the third-party solution is listed.

        1. In the Partner Applications tab, select the partner that supports your non-Windows devices.

        2. Select Open partner page to open the partner's page. Follow the instructions provided on the page.

        3. After creating an account or subscribing to the partner solution, you should get to a stage where a tenant Global Admin in your organization is asked to accept a permission request from the partner application. Read the permission request carefully to make sure that it is aligned with the service that you require.

  2. Run a detection test by following the instructions of the third-party solution.

Offboard non-Windows machines

  1. Follow the third-party's documentation to disconnect the third-party solution from Microsoft Defender ATP.

  2. Remove permissions for the third-party solution in your Azure AD tenant.

    1. Sign in to the Azure portal.
    2. Select Azure Active Directory > Enterprise Applications.
    3. Select the application you'd like to offboard.
    4. Select the Delete button.