Intune - What can Intune manage on Servers

Question

Hi all. Just a quick one. Which of the below settings can be managed on servers from Intune side? Servers are onboarded to Defender. Antivirus? Firewall? ASR? Regards

Answer 1

You can onboard Windows Servers into Intune by using Defender for Endpoint (you would also hybrid join them to the corresponding Microsoft Entra tenant). This would allow you to use device-based Conditional access - as described in https://learn.microsoft.com/en-us/mem/intune/protect/advanced-threat-protection In addition, you would obviously be able to use all of the Defender for Endpoint based functionality, including its integration with Intune (https://learn.microsoft.com/en-us/mem/intune/protect/mde-security-integration)

---

hth Marcin

Answer 2

@Andries Oosthuizen， Thanks for posting in Q&A. Intune can manage Antivirus, Firewall, and Attack Surface Reduction (ASR) policies on servers that are onboarded to Defender for Endpoint. Here is a table list the profile support on windows server.

https://learn.microsoft.com/en-us/mem/intune/protect/mde-security-integration#windows-10-windows-11-and-windows-server

Meanwhile, the settings in the profile apply to the different platforms and versions. Here is a link for ASR rules for your reference:

https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/attack-surface-reduction-rules-reference?view=o365-worldwide#asr-rules-supported-operating-systems

Hope the above information can help.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.