Blog Post

Microsoft Defender for Endpoint Blog
4 MIN READ

Defending Windows Server 2012 R2 and 2016

Paul_Huijbregts's avatar
Paul_Huijbregts
Icon for Microsoft rankMicrosoft
Oct 07, 2021
Update: The modern, unified Microsoft Defender for Endpoint solution for Windows Server 2012 R2 and Windows Server 2016 is now generally available as of April 11th, 2022.   Ensure you apply the l...
Updated Oct 08, 2022
Version 21.0
microsoft defender for endpoint
GeoffMauch's avatar
GeoffMauch
Copper Contributor
Dec 17, 2021

two questions:

 

1) Has anyone had any luck getting 2012R2 enabled for Tamper Protection using new MDE agent + SCCM tenant attach +Intune Windows Security Experience config policy? I upgraded a few 2012R2 servers to new MDE agent that we manage with SCCM 2107 hotfix version and have them Tenant attached so we could apply the tamper protection enable settings policy from Intune to them. All our 2016 servers with new MDE agent show as Tamper Protected from same policy but 2012R2 servers dont apply the tamper policy.

 

Running get-mpcomputerstatus locally on all 2012R2 shows:

 

Istamperprotected=false 

TamperProtectionSource = E5 Transition

 

2) About ASR rules, with the new MDE agent on 2016\2012R2 servers we manage with SCCM 2107 do we have the ability to set ASR configurations using SCCM Exploit Guard Policies? I tested creating an ASR rule set using SCCM and deployed it to new 2016\2012R2 MDE agents and it doesnt work. I just want to know if this is supported or if we will have to keep manually setting ASR rules for 2016\2012R2 using GPO or PowerShell. Thanks