Onboarding Devices to Defender for Endpoint

Onboarding devices can take many forms, depending on both the type (mobile versus computer device) and the operating system (current versions of Windows, previous or legacy versions of Windows, Android, Linux, macOS, or iOS). The latest Windows clients have the software built in and merely have to be instructed to connect to the Defender service, while others may require agents or client software to be installed.

Microsoft recommends using Intune as the deployment method, which typically requires newer devices and operating systems. This helps ensure that you’re using systems that are under current maintenance or support agreements and have security updates regularly published. Newer devices and operating systems are also able to take advantage of the latest advances in management tooling. You can also onboard using Intune, local scripts, Group Policy, or third-party management platforms that leverage the scripting or packages supplied...