%3CLINGO-SUB%20id%3D%22lingo-sub-1597453%22%20slang%3D%22en-US%22%3EMicrosoft%20Defender%20Antivirus%20for%20ConfigMgr%20tenant%20attach%20clients%20public%20preview%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1597453%22%20slang%3D%22en-US%22%3E%3CP%3EWith%20the%20release%20of%20Configuration%20Manager%202006%2C%20we%E2%80%99re%20making%20another%20step%20towards%20the%20Microsoft%20Endpoint%20Manager%20admin%20center%20being%20the%20security%20policy%20management%20tool%20for%20ConfigMgr%20standalone%20clients.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EMicrosoft%20Defender%20Antivirus%20policies%20for%20Windows%20can%20now%20be%20managed%20from%20the%20Endpoint%20security%20node%20of%20Microsoft%20Endpoint%20Manager%20(MEM)%20and%20targeted%20to%20on-premises%20Configuration%20Manager%20collections.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThis%20allows%20your%20security%20admins%20to%20target%20both%20cloud-born%20MDM%20devices%2C%20Intune%20%2B%20ConfigMgr%20co-managed%20devices%20and%20ConfigMgr%20only%20clients.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ETo%20start%2C%20ensure%20you%20have%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmem%2Fconfigmgr%2Ftenant-attach%2Fdevice-sync-actions%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3ETenant%20Attach%20enabled%3C%2FA%3E.%20Once%20enabled%2C%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmem%2Fintune%2Fprotect%2Fendpoint-security-edr-policy%23task-3-select-collections-to-synchronize%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Esync%20some%20ConfigMgr%20collections%3C%2FA%3E%20into%20MEM%2C%20which%20will%20make%20them%20available%20for%20configuration%20targeting.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EOnce%20this%20is%20done%2C%20browse%20to%20the%20%3CA%20href%3D%22http%3A%2F%2Fendpoint.microsoft.com%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttp%3A%2F%2Fendpoint.microsoft.com%3C%2FA%3E%20admin%20center%2C%20select%20%3CSTRONG%3EEndpoint%20security%20%26gt%3B%20Antivirus%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ESelect%20%3CSTRONG%3ECreate%20Policy%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CDIV%20id%3D%22tinyMceEditorMatt%20Shadbolt_0%22%20class%3D%22mceNonEditable%20lia-copypaste-placeholder%22%3E%26nbsp%3B%3C%2FDIV%3E%0A%3CP%3ESelect%20%3CSTRONG%3EWindows%2010%20and%20Windows%20Server%20(ConfigMgr)%3C%2FSTRONG%3E%20as%20the%20Platform%2C%20and%20%3CSTRONG%3EWindows%20Defender%20Antivirus%20(Preview)%3C%2FSTRONG%3E%20for%20the%20Profile%2C%20and%20select%20%3CSTRONG%3ECreate%3C%2FSTRONG%3E.%3C%2FP%3E%0A%3CDIV%20id%3D%22tinyMceEditorMatt%20Shadbolt_1%22%20class%3D%22mceNonEditable%20lia-copypaste-placeholder%22%3E%26nbsp%3B%3C%2FDIV%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Picture2.png%22%20style%3D%22width%3A%20624px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F213195i04104696C02E8358%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20title%3D%22Picture2.png%22%20alt%3D%22Picture2.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EGive%20the%20policy%20a%20name%2C%20and%20configure%20your%20desired%20settings%3C%2FP%3E%0A%3CDIV%20id%3D%22tinyMceEditorMatt%20Shadbolt_2%22%20class%3D%22mceNonEditable%20lia-copypaste-placeholder%22%3E%26nbsp%3B%3C%2FDIV%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Picture3.png%22%20style%3D%22width%3A%20624px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F213192i8DDB1A6C47DD8D72%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20title%3D%22Picture3.png%22%20alt%3D%22Picture3.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CDIV%20id%3D%22tinyMceEditorMatt%20Shadbolt_3%22%20class%3D%22mceNonEditable%20lia-copypaste-placeholder%22%3E%26nbsp%3B%3C%2FDIV%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Picture4.png%22%20style%3D%22width%3A%20624px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F213194i67FEBD7C5CAAC48F%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20title%3D%22Picture4.png%22%20alt%3D%22Picture4.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ENow%20select%20some%20%3CSTRONG%3Ecollections%3C%2FSTRONG%3E%20to%20target%20and%20finish%20the%20wizard.%20Once%20complete%2C%20MEM%20will%20sync%20down%20the%20policy%20configuration%20to%20ConfigMgr%2C%20including%20the%20collection%20assignments.%3C%2FP%3E%0A%3CDIV%20id%3D%22tinyMceEditorMatt%20Shadbolt_4%22%20class%3D%22mceNonEditable%20lia-copypaste-placeholder%22%3E%26nbsp%3B%3C%2FDIV%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Picture5.png%22%20style%3D%22width%3A%20624px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F213197iC74DC1296AB31783%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20title%3D%22Picture5.png%22%20alt%3D%22Picture5.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThe%20configuration%20will%20apply%20to%20the%20devices%20in%20the%20collection%2C%20and%20report%20back%20it%E2%80%99s%20status%20in%20both%20Configuration%20Manager%20and%20in%20the%20MEM%20console.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EIn%20ConfigMgr%20%3CSTRONG%3EMonitoring%20%26gt%3B%20Deployments%3C%2FSTRONG%3E%26nbsp%3B%3C%2FP%3E%0A%3CDIV%20id%3D%22tinyMceEditorMatt%20Shadbolt_5%22%20class%3D%22mceNonEditable%20lia-copypaste-placeholder%22%3E%26nbsp%3B%3C%2FDIV%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Picture6.png%22%20style%3D%22width%3A%20624px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F213198iD15A4C0C9C216053%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20title%3D%22Picture6.png%22%20alt%3D%22Picture6.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CDIV%20id%3D%22tinyMceEditorMatt%20Shadbolt_6%22%20class%3D%22mceNonEditable%20lia-copypaste-placeholder%22%3E%26nbsp%3B%3C%2FDIV%3E%0A%3CP%3EIn%20Endpoint%20Manager%20%3CSTRONG%3Epolicy%20%26gt%3B%20Overview%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Picture7.png%22%20style%3D%22width%3A%20618px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F213196iA6622458DE00D60A%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20title%3D%22Picture7.png%22%20alt%3D%22Picture7.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ETo%20learn%20more%20about%20this%20feature%2C%20please%20see%20our%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fmem%2Fintune%2Fprotect%2Fendpoint-security-antivirus-policy%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Edocumentation%3C%2FA%3E.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-TEASER%20id%3D%22lingo-teaser-1597453%22%20slang%3D%22en-US%22%3E%3CP%3EWith%20the%20release%20of%20Configuration%20Manager%202006%2C%20we%E2%80%99re%20making%20another%20step%20towards%20the%20Microsoft%20Endpoint%20Manager%20admin%20center%20being%20the%20security%20policy%20management%20tool%20for%20ConfigMgr%20standalone%20clients.%3C%2FP%3E%3C%2FLINGO-TEASER%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1597453%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3Econfigmgr%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EDefender%20AV%20Endpoint%20security%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EIntune%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Etenant%20attach%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1620006%22%20slang%3D%22en-US%22%3ERe%3A%20Microsoft%20Defender%20Antivirus%20for%20ConfigMgr%20tenant%20attach%20clients%20public%20preview%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1620006%22%20slang%3D%22en-US%22%3E%3CDIV%20class%3D%22profile-avatar%22%3E%3CDIV%20class%3D%22user-navigation-user-profile%22%3E%3CDIV%20class%3D%22UserAvatar%20lia-user-avatar%22%3E%3CDIV%20class%3D%22UserAvatarWrapper%22%3E%3CDIV%20class%3D%22UserAvatar%20lia-user-avatar%20lia-component-common-widget-user-avatar%20Microsoft%22%3E%3CP%3E%3CA%20target%3D%22_blank%22%3EMatt%26nbsp%3BShadbolt%3C%2FA%3E%3C%2FP%3E%3CP%3EIt%20works%20like%20a%20charm.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EJust%20have%20one%20small%20question.%20Is%20it%20intended%20that%20if%20we%20delete%20a%20policy%20deployment%2C%20made%20from%20MEMAC%20in%20the%20ConfigMgr%20console%2C%20the%20assignment%20doesn't%20go%20away%20in%20MEMAC%20and%20if%20so%2C%20how%20could%20we%20monitor%20that%2C%20just%20so%20we're%20alerted%20if%20that%20ever%20happens%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThks%3C%2FP%3E%3C%2FDIV%3E%3C%2FDIV%3E%3C%2FDIV%3E%3C%2FDIV%3E%3C%2FDIV%3E%3CDIV%20class%3D%22user-details%22%3E%3CDIV%20class%3D%22user-mention-tag%22%3E%3CP%20class%3D%22user-mention-tag-label%22%3E%26nbsp%3B%3C%2FP%3E%3C%2FDIV%3E%3C%2FDIV%3E%3C%2FLINGO-BODY%3E
Microsoft

With the release of Configuration Manager 2006, we’re making another step towards the Microsoft Endpoint Manager admin center being the security policy management tool for ConfigMgr standalone clients.

 

Microsoft Defender Antivirus policies for Windows can now be managed from the Endpoint security node of Microsoft Endpoint Manager (MEM) and targeted to on-premises Configuration Manager collections.

 

This allows your security admins to target both cloud-born MDM devices, Intune + ConfigMgr co-managed devices and ConfigMgr only clients.

 

To start, ensure you have Tenant Attach enabled. Once enabled, sync some ConfigMgr collections into MEM, which will make them available for configuration targeting.

 

Once this is done, browse to the http://endpoint.microsoft.com admin center, select Endpoint security > Antivirus

 

Select Create Policy

 

Select Windows 10 and Windows Server (ConfigMgr) as the Platform, and Windows Defender Antivirus (Preview) for the Profile, and select Create.

 

Picture2.png

 

Give the policy a name, and configure your desired settings

 

Picture3.png

 

Picture4.png

 

Now select some collections to target and finish the wizard. Once complete, MEM will sync down the policy configuration to ConfigMgr, including the collection assignments.

 

Picture5.png

 

The configuration will apply to the devices in the collection, and report back it’s status in both Configuration Manager and in the MEM console.

 

In ConfigMgr Monitoring > Deployments 

 

Picture6.png

 

In Endpoint Manager policy > Overview

Picture7.png

 

To learn more about this feature, please see our documentation.

 

1 Comment