Just registered a workgroup server to defender 365 and it says "AAD joined"

[MrJohnson1905]

For compliance reasons there is a server that we can not have on a domain. It was/is a workgroup server with a couple of local accounts. All users that need access to the data need to have background checks by the German police (this includes "domain admins/backup operators etc). Those checks involve interviews with family/doctors etc.

Can we be part of defender 365 without being part of AAD? Perhaps AAD is not what i think it is, but if it means anyone can access the system (including our IT "admins") I need to know.

[#2 · Accepted solution]

Yes, machines don't have to be AAD joined - you can onboard any machine, in this case you probably will need to use the local script to do so. AAD join will open up additional functionality, but it is not mandatory.