Defender AV Security Intelligence and Product Updates for Azure Virtual Desktops

Hi, that article only really applies to non-persistent environments when you want to offload the downloading of Defender Updates to a dedicated VM.

If you are running Persistent VMs and are running Defender in passivated mode then your VMs will still reach out and download security updates. You can see how this process works here - https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/microsoft-defender-antivirus-updates?view=o365-worldwide and here https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/cloud-protection-microsoft-defender-antivirus?view=o365-worldwide