Preview Feature - Manage Server Security with Intune!

[@Timmy-Hi5]

08:00 "It might me important, sounds important to me" 😁😂🤣You made my Friday 😂🤣😁 super funny ... of course you must know what that "slider" do 🤣😅 /me think creating chaos for Admins is Dean's favourite Friday task🤣🤣

[@gerardmoore4973]

Great video does this work to get a Windows Server co-managed with intune and configuration management ?

[@blablablablaaaaa]

Dean, this is great, thanks! But where did you find out about this change? I didn't see in the Defender Blog, the 'What's New In Defender' page, so obviously I'm missing some channel for getting informed about updates! EDIT: just saw the comment below - thanks!

[@DeanEllerbyMVP]

You're welcome ! Thanks for the feedback.

[@on_spikes6867]

Is "Security settings management" really neccessary to push MDE config from Intune to Servers? if im not mistaken you can onboard servers with Arc to defender for cloud and then enable the connection from MDC to MDE and then any policy from intune gets applied to the servers through Arc?

[@on_spikes6867]

nevermind, you mentioned it in the intro...

[@lasolution365]

The update from Microsoft is that this feature is delayed to early July now.

[@DeanEllerbyMVP]

So it’s no longer in Public Preview?

[@aranbillen5954]

Hi, thank you for this! I cant get the server to show in intune or azure ad only in devices within the defender portal, I have enabled requirements in the connectors / token area I check the server in defender portal and it still states: The device isn’t enrolled to MDE security settings management, verify it complies with pre-requisites and that it is in scope for the feature in the MDE Settings.

[@Kongcecil]

Real-time Protection and Cloud-Delivered protection is also locked by Tamper Protection when the device is onboarded, so I Guess you can't be sure that the MDE-Security Settings actually worked in this example? Right? Thanks for the video :-)

[@DeanEllerbyMVP]

Yes - you have a great point. The 'proof' I showed isn't actually proof that it worked at all :-)

[@cyphernz]

sounds good, link to the news of this update? i can't find anything

[@DeanEllerbyMVP]

www.linkedin.com/pulse/manage-windows-servers-defender-endpoint-intune-dean-ellerby?

[@chadglass4498]

Does this work for GCC customers as well?

[@SophosDefender]

Does ASR work with this method?

[@on_spikes6867]

no

[@DeanEllerbyMVP]

Yep

[@alQamar79]

Wonder why they bother with cmd and cscript instead of PowerShell?

[@tonypark2710]

Does this also work for Windows servers that are not VMs generated in Azure?

[@DeanEllerbyMVP]

Yep!

[@NitinRNtini]

Yes, as long as they are enrolled and managed by MDE, they will show up in Intune. You can verify this by going to the device details where you will see “Managed by MDE” and “MDE Enrollment:success”.

[@Al-eo3sh]

Does this work on server core?

[@waleedhaddad5448]

I have an on-prem server that I am trying to get Defender for server installed. I have successfully connected several servers via Arc and was able to install MDE successfully. However I have several servers that will not connect. Many of them are server 2016. When I try to allow install MDE I receive the following error "Defender for endpoint failed to register to AAD due to an AAD connect Misconfiguration." Has anyone dealt with this and have a solution?

[@cyphernz]

For the life of me cant get this working on a 2019 domain controller. Server is onboarded but doesnt show in Intune or AAD

[@cyphernz]

Update: confirmed from MS this is not supported for DCs

[@DeanEllerbyMVP]

Seems so! How annoying 😟

[@cyphernz]

@@DeanEllerbyMVP yeh. Oh well ill continuen to use GPO to manage AV settings on DCs. But Intune for all other servers

[@cyphernz]

Also, this works for SMBs using Defender for Business Server licensing

[@alQamar79]

Check the Onboarding Script seems they rely on local Groups which they don't have so they would actually use Groups in ADDS of the computers OU but not what the script would be doing.

[@Timmy-Hi5]

one Server only ?? how you would recommend the eastated of 12000 servers 😁... in our environment "Mission Impossible" so we will stick with 3rd party

[@DeanEllerbyMVP]

How did you onboard the 12,000 you currently have? The procedure would probably be of similar scale and complexity? If I had 12,000 servers in my lab, I’d be broke 😀

[@Timmy-Hi5]

@@DeanEllerbyMVP you can't be, MVP broke 😁😂.. impossible 😁..

[@Anonymoussssss-r7b]

You will of course use Arc on management group level or direct onboarding in MDC if it’s already deployed as a vm in azure. That’s what recommended if you want to scale up and cover multiple servers. Then after the onboarding decide if you want to enforce security mgmt capabilities from intune with the mdc connection in MDE portal settings. So my question to you is: Why use third party when the procedure and the complexity still remains?

[@liskeard100]

Opoi