MDATP Next Generation Protection feature

[smitak13]

Hi, 

We are implementing the MDATP solution in Azure for one of our clients. The endpoints will be mainly Windows Server 2016 and Windows Server 2019 VMs all in the Azure cloud. 

We would be on-boarding the servers via Azure Security Center (standard tier) and then turn on the integration with MDATP. We want to understand how to manage the Next Generation Protection feature for MDATP. 

Can you kindly help answer the below queries - 

1. Given the Microsoft Defender Antivirus will be a part of the image for Windows Server 2016 and 2019., how can we manage/view the scan results of the Antivirus feature as this cannot be done using the MDATP security center?

2. There are different configuration tools for Defender Antivirus configuration - Intune, Microsoft Endpoint configuration Manager, Group Policies etc. What is the best tool to manage the configuration?

Note: The client does not have Microsoft 365 license

3. License information for the recommended configuration tool above. 

Regards,

Smita Kulkarni

[#2]

1. Alerts from MD AV are also in the portal of MDATP.
2. It really depends on your current environment and what you are using ATM. MEMCM and Intune are the most integrated and have the easiest wizards. Intune has more features available than MEMCM

3. GPO's are free :).
MEMCM/Intune are included in an EMS E3 license

[#3]

Thanks @Thijs Lecomte for your response. Much appreciated.