Windows Defender Antivirus (Active or Passive)
Hi, I need to get a report of machines with status of Windows Defender Antivirus (Active or Passive). As per the document -https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup#verify-that-microsoft-defender-antivirus-is-in-passive-mode it says to run Get-MpComputerStatus cmdlet in Powershell and check the value for AMRunningMode. When I ran this on a machine where a 3rd party AV was installed with Windows Defender AV running in passive mode, I got the value Normal under AMRunningMode instead of Passive. Is there any other way we can get the status of Windows Defender AV from MDATP Security Center or Intune.Microsoft Defender ATP Servers Licensing
Hi, I have gone through the below article but still am confused on the licensing model for servers if I need to onboard them on MDATP. https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/minimum-requirements Suppose I have Microsoft 365 E5 Security license with me, so will I be able to onboard windows server from MDATP Security Center or do I need to get any standalone license just for server. I don't want to go with the Pay-as-you-go model from ASC. Thijs Lecomte Alex Verboon Steve Newby
