Forum Discussion

Huaye's avatar
Huaye
Icon for Microsoft rankMicrosoft
Apr 10, 2025
Solved

Can I use Microsoft Defender for Endpoint for CIS benchmark assessment

Hi Team,   I have a customer who wants to do CIS benchmark assessment (CIS Microsoft Windows Server Benchmarks) for On-prem Windows 2022 servers. Can we use Microsoft defender for endpoint to do ...
  • cyb3rmik3's avatar
    cyb3rmik3
    Apr 11, 2025

    Hello Huaye,

    If your servers are already on Azure Arc with MDC P2 enabled go through the Unified Security Operations portal, Endpoints > Vulnerability management > Baseline assessments > Profiles and here click Create.

    Here, you can choose the CIS version required.

    And following you can choose specific configurations and also specific devices groups per tags.

    Let me know if this helped.

    If I have answered your question, please mark your post as Solved

    If you like my response, please consider giving it a like

Huaye's avatar
Huaye
Icon for Microsoft rankMicrosoft
Apr 14, 2025

Hi cyb3rmik3 If I compare using Microsoft Defender for Endpoint vs. Microsoft Defender for Cloud to do the CIS benchmark assessment, the main difference is for MDC, the servers need to be connected to Azure Arc, which is not required if we use MDE. Am I correct? 

Resources