Question

Your organization runs several Windows Server 2022 machines hosted in Azure. Security leadership wants these servers protected by Microsoft Defender for Endpoint so they appear in the Microsoft Defender portal device inventory alongside your onboarded Windows 11 clients. You want the onboarding to be automatic and centrally managed with the least ongoing administrative effort. What should you do?

Accepted Answer

Enable Microsoft Defender for Servers in Microsoft Defender for Cloud and turn on the automatic integration/provisioning of the Defender for Endpoint agent.

Answer

Download the local onboarding script from the Defender portal and run it manually on each server.

Answer

Create a Microsoft Intune device configuration profile and assign it to the servers to push the onboarding package.

Answer

Deploy the onboarding package through a Group Policy Object linked to the servers' organizational unit.