MDE managed devices

Question

Hi!
It is possible to manage Windows Servers with Defender for Endpoint and Intune.

After setup, the Windows Server device appears in Intune. But can Devices > Configuration > Policies be deployed to it, or only policies under the Endpoint security blade?

I need to apply Auditing Policies to MDE-managed devices. Can this be done from Intune?

Answer 1

@Artem Shaturskyi Thanks for posting in our Q&A.

No, you can't deploy policies to windows server under Devices > Configuration > Policies. Intune can manage Antivirus, Firewall, and Attack Surface Reduction (ASR) policies (under Endpoint security) on Windows servers that are onboarded to Defender for Endpoint.

Meanwhile, the settings in the profile apply to the different platforms and versions. Here is a link for ASR rules for your reference:

https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/attack-surface-reduction-rules-reference?view=o365-worldwide#asr-rules-supported-operating-systems

Based on my research, I didn't find a setting in intune that can apply Auditing Policies to MDE-managed windows servers.

Thanks for your understanding.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.