SOLVED

Move from MDE for servers to Defender for Cloud/ASC

%3CLINGO-SUB%20id%3D%22lingo-sub-2997476%22%20slang%3D%22en-US%22%3EMove%20from%20MDE%20for%20servers%20to%20Defender%20for%20Cloud%2FASC%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2997476%22%20slang%3D%22en-US%22%3E%3CP%3EHow%20do%20you%20move%20from%20MDE%20for%20Servers%20to%20Defender%20for%20Cloud%20when%20using%20the%20new%20Onboarding%20Package%20in%20MDE%20for%202012r2%20and%202016%20servers%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EShould%20you%20run%20the%20offboard%20package%20first%20and%20then%20install%20the%20Log%20Analytic%20Agent%20and%20connect%20to%20Defender%20for%20Cloud.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIf%20you%20use%20the%20Log%20Analytic%20Agent%2C%20I%20guess%20you%20will%20loose%20the%20new%20options%20you%20get%20with%20the%20new%20Onboarding%20Package%3B%20run%20Live%20response%2C%20isolate%20device%20etc%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-3001744%22%20slang%3D%22en-US%22%3ERe%3A%20Move%20from%20MDE%20for%20servers%20to%20Defender%20for%20Cloud%2FASC%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-3001744%22%20slang%3D%22en-US%22%3EDefender%20for%20Cloud%20does%20not%20fully%20support%20the%20new%20MDE%20agent%20for%20downlevel%20OS's%20yet.%20%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fsecurity%2Fdefender-endpoint%2Fconfigure-server-endpoints%3Fview%3Do365-worldwide%23integration-with-microsoft-defender-for-cloud%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fsecurity%2Fdefender-endpoint%2Fconfigure-server-endpoints%3Fview%3Do365-worldwide%23integration-with-microsoft-defender-for-cloud%3C%2FA%3E%3CBR%20%2F%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-3001903%22%20slang%3D%22en-US%22%3ERe%3A%20Move%20from%20MDE%20for%20servers%20to%20Defender%20for%20Cloud%2FASC%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-3001903%22%20slang%3D%22en-US%22%3EThanks%2C%20do%20you%20know%20when%20or%20if%20the%20new%20MDE%20agent%20will%20be%20supported%20in%20Defender%20for%20Cloud%3F%3C%2FLINGO-BODY%3E
Occasional Contributor

How do you move from MDE for Servers to Defender for Cloud when using the new Onboarding Package in MDE for 2012r2 and 2016 servers?

 

Should you run the offboard package first and then install the Log Analytic Agent and connect to Defender for Cloud.

 

If you use the Log Analytic Agent, I guess you will loose the new options you get with the new Onboarding Package; run Live response, isolate device etc?

3 Replies
Defender for Cloud does not fully support the new MDE agent for downlevel OS's yet.
https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/configure-server-endpoints...
Thanks, do you know when or if the new MDE agent will be supported in Defender for Cloud?
best response confirmed by khelbo (Occasional Contributor)
Solution
It will be for sure soon. We don't have a solid ETA yet but very likely early in Q1CY22.