We onboarded several devices to Micosoft Defender for EndPoints P1 using MECM. The onboarding was successful, but the devices are no longer are applying the Antimalware Policies from MECM. Specifically, we disable Real Time Scanning since we're using Carbon Black cloud and don't want to manage two sets of products.
The documentation has my head spinning due to what seems like numerous ways to onboard devices and manage them. Am I wrong in thinking that the EndPoint Protection policies specified in MECM would apply to Windows Defender?
