Forum Discussion

Copper Contributor

Apr 12, 2021

Solved

Enroll only selected servers in Azure Defender

Hi Team, I have a existing LA Workspace which I use for Sentinel, so the MMA is installed on our on-premise servers. Now I would like to enable this workspace in Azure Defender, but I'll only wa...

StanislavBelov
Apr 12, 2021
Hi khelbo

Even though it's possible to enable AzDefender for Servers at the workspace level, it's highly recommended to enable it at the subscription level, otherwise you won't get some additional features like JIT, Application controls, MDE, etc.
Azure Defender for servers - the benefits and features | Microsoft Docs

Also, its not currently possible to enable Defender for a subset of servers connected to ASC, this is something we are considering adding in the future.

Azure Security Center FAQ - data collection and agents | Microsoft Docs

StanislavBelov

Microsoft

Apr 12, 2021

Hi khelbo

Even though it's possible to enable AzDefender for Servers at the workspace level, it's highly recommended to enable it at the subscription level, otherwise you won't get some additional features like JIT, Application controls, MDE, etc.
Azure Defender for servers - the benefits and features | Microsoft Docs

Also, its not currently possible to enable Defender for a subset of servers connected to ASC, this is something we are considering adding in the future.

Azure Security Center FAQ - data collection and agents | Microsoft Docs