Defender for endpoint onboarding

Hello, 

Defender for endpoint should be installed on every device in the organization?

What is the best practices?

Regards,