This message was deleted.

At my last place, our 2016 VDAs were all on Defender, registered in MDE.

Thanks, Im gettign conflicting info about them going into intune verse MDE. Do you recall any license issues with users logging into a shared desktop like citrix? (With defender being user based lic and a lic count(

MDE

interesting. MS appears to contradict by posting this https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/how-to-manage-microsoft-defender-on-windows-server-via-intune/ba-p/3713195

I never dealt with the licensing side, thankfully.

You can’t enrol Windows Server into Intune, but what you can do is configure Defender policies for devices enrolled into and managed by MDE. This allows you to configure Defender policies in a single location instead of across Intune and MDE

Or you can can use config manager and then apply intune windows Defender/Firewall policies to config manager controlled machines via tenant manager per the first article above. Quite a mess and I’ll think I’ll stay with just MDE for servers.

Yeah, it was much easier for us (Citrix team) to use a GPO for Defender as opposed to letting the SCCM monkeys tinker with it. We had zero issues with our implementation, whereas they had... a few.