Onboarding Windows clients into MDE
To get value out of MDE and configure many of its advanced protection capabilities, clients must be onboarded to an instance of MDE. There are several ways to achieve this, and they are determined by how your devices are managed and the architecture of your network. Most methods to onboard clients require deploying an onboarding package that can be distributed using any of the following methods:
- Local script or Group Policy
- Microsoft Endpoint Configuration Manager
- Mobile Device Management (Intune or other MDM providers)
- VDI onboarding script for non-persistent devices
The onboarding package can be obtained in the Microsoft 365 Defender portal by logging into https://security.microsoft.com and choosing Settings | Endpoints | Onboarding under the Device management section. However, if you're using Intune and a cloud-native architecture, clients can be onboarded automatically by enabling Microsoft Intune Connection from...
