Next-generation protection in Windows 10 and Windows Server 2016

Applies to:

Next-generation protection includes services that use machine learning together with the cloud to protect devices in your enterprise organization. Next-generation protection services include:


Visit the Windows Defender Testground website at to see how the following features work:

For more information regarding what's new in each Windows version, please refer to What's new in Microsoft Defender ATP.

Minimum system requirements

Windows Defender Antivirus is your main vehicle for next-generation protection, and it has the same hardware requirements as Windows 10. For more information, see:

Configuring next-generation services

You can use the following to configure and manage next-generation services in Windows 10 while running Windows Defender Antivirus:

  • System Center Configuration Manager (as System Center Endpoint Protection, or SCEP)
  • Microsoft Intune
  • PowerShell
  • Windows Management Instrumentation (WMI)
  • Group Policy

Configuration and management is largely the same in Windows Server 2016, while running Windows Defender Antivirus; however, there are some differences. To learn more, see Windows Defender Antivirus on Windows Server 2016.