Forum Discussion

Copper Contributor

Dec 17, 2020

Solved

Microsoft Defender for Endpoint for Server isolation capability

Hello, I've been struggling to find this information and decided to post this here. Microsoft Defender for Endpoint (formerly MDATP) has the capability to isolate registered devices via a click in...

XPaulo
Dec 17, 2020
shoando Thanks for your input. OK, so 2016 needs the agent but for 2019 would it work, since AFAIU, it is native in the OS. Am I correct?

shoando

Brass Contributor

Dec 17, 2020

For operating systems that use the Microsoft Monitoring Agent, isolation is not available.XPaulo

XPaulo

Copper Contributor

Dec 17, 2020

shoando Thanks for your input. OK, so 2016 needs the agent but for 2019 would it work, since AFAIU, it is native in the OS. Am I correct?

daviddevosstars
MCT
Dec 18, 2020
XPaulo 2016 and 2019 servers don't require the agent installation. This link should help you out with a clear overview on the servers side of capabilities :

https://techcommunity.microsoft.com/t5/microsoft-defender-for-endpoint/protecting-windows-server-with-windows-defender-atp/ba-p/267114

I hope it helps.
- XPaulo
  Copper Contributor
  Dec 18, 2020
  daviddevosstars Thanks for your reply. Yes I saw the article but it is quite old and it does not mention anything about isolation. If I scroll down to the EDR functionality, which I would believe device isolation would be part of, then it does say that 2016 requires an agent. But then it's not clear what agent (MAM?) since I kind of understand that the MAM agent it a simple monitoring agent... so still not clear to me. And I'm not able to PoC or test this in any way.. 😞