Microsoft Defender for Endpoint deployment to devices that aren't in a domain or active directory

We recently deployed Defender for Endpoint with Group Policy to the devices within the domain. And we are looking to deploy Defender to devices that aren't in the domain. I know we can use a local sc...