How to enroll your Microsoft 365 tenant to the Microsoft Defender for Endpoint service

Case

You have purchased the Microsoft Defender for Endpoint service in your M365 tenant and need to enroll your organization to the Defender for endpoint service. The Microsoft Defender for Endpoint service is part of Windows 10 Enterprise E5 licensing.

Using Microsoft Defender for Endpoint service you can manage the following types of devices:

  • Windows 10 Enterprise
  • Windows Server 2008 R2 SP1 up to 2019
  • Linux Server
  • MacOSX
  • iOS
  • Android

Solution

Follow the steo-by-step process below.

  • Navigate to https://securitysecenter.windows.com
  • Click Next in step 1 after reviewing the Microsoft Defender for Endpoint service configuration guide and data privacy guide.
Step 1
  • In step 2, choose the basic data retention preferences as per your location and click Next.
Step 2
  • After clicking Next, a popup message warns you that you will not be able to change most of the above step 2 settings afterwards without completely off-boarding your organization first.
  • After clicking Continue, your Microsoft Defender for Endpoint account will be created.
  • During next step 4 you will be onboarding your first device to Microsoft Defender for Endpoint service.

Click Download Package to receive the deployment script.

To verify that the device is properly onboarded and reporting to the service,run the detection script on the newly onboarded device:

  1. Open a Command Prompt window
  2. At the prompt, copy and run the command below. The Command Prompt window will close automatically.
powershell.exe -NoExit -ExecutionPolicy Bypass -WindowStyle Hidden $ErrorActionPreference= 'silentlycontinue';(New-Object System.Net.WebClient).DownloadFile('http://127.0.0.1/1.exe', 'C:\\test-WDATP-test\\invoice.exe');Start-Process 'C:\\test-WDATP-test\\invoice.exe'

If successful, the detection test will be marked as completed and a new alert will appear in few minutes. You should now be ready to start using Microsoft Defender for endpoint. Click on Start using Microsoft Defender Endpoint link to continue.

You can now start managing your Windows 10 Enterprise E5 devices from the control panel: Security operations dashboard – Microsoft Defender for Endpoint (windows.com). It may take up to 60 minutes before your protected devices appear in the management dashboard.

Sources

https://www.microsoft.com/en-ww/microsoft-365/security/endpoint-defender

https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/onboard-configure

https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-advanced-threat-protection

https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/data-storage-privacy

Was this article helpful?

Related Articles