Skip to content
← Back to the guide

Microsoft Defender for Endpoint explained

8slides. Screenshot a slide, download it as a PNG, or use your browser's Print → Save as PDF for a LinkedIn-ready multi-page carousel — each slide becomes one page.

M
solvingmicrosoft365.com
1 / 8

Microsoft Defender for Endpoint explained

Defender for Endpoint is Microsoft's EDR/XDR platform for laptops, servers, and mobile. Here's what it does.

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/defender-for-endpoint-explained

Slide 1Download PNG
M
solvingmicrosoft365.com
2 / 8
01

What does Defender for Endpoint Plan 1 include versus Plan 2?

Plan 1 (in E3): next-generation protection, attack surface reduction rules, device control, manual response actions, and centralised management. Plan 2 (in E5, E5 Security): everything in P1 plus EDR, automated investig…

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/defender-for-endpoint-explained

Slide 2Download PNG
M
solvingmicrosoft365.com
3 / 8
02

How do I onboard devices to Defender for Endpoint?

Windows via Intune (the endpoint security onboarding policy), Group Policy, Configuration Manager, or a local script; macOS and Linux via an installer package and onboarding profile; mobile via the Defender app with Int…

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/defender-for-endpoint-explained

Slide 3Download PNG
M
solvingmicrosoft365.com
4 / 8
03

Can Defender for Endpoint run alongside another antivirus?

Yes. When a non-Microsoft antivirus is the primary, Defender Antivirus goes into passive mode and Defender for Endpoint can still run EDR in block mode, providing detection and response behind the other product. Two act…

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/defender-for-endpoint-explained

Slide 4Download PNG
M
solvingmicrosoft365.com
5 / 8
04

Included with Microsoft 365 E3 or Business Premium

Buy: Plan 1 (attack surface reduction, next-gen antivirus, manual response actions, some device inventory)

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/defender-for-endpoint-explained

Slide 5Download PNG
M
solvingmicrosoft365.com
6 / 8
05

Included with Microsoft 365 E5

Buy: Plan 2 (adds EDR, advanced hunting, auto-investigation & response, threat & vulnerability management)

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/defender-for-endpoint-explained

Slide 6Download PNG
M
solvingmicrosoft365.com
7 / 8
06

SMB (up to 300 users) on Business Premium

Buy: Defender for Business — different SKU, similar functionality, simpler console

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/defender-for-endpoint-explained

Slide 7Download PNG
M
solvingmicrosoft365.com
8 / 8
07

Servers

Buy: Defender for Servers via Defender for Cloud (P1 or P2) — Endpoint is only for user devices

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/defender-for-endpoint-explained

Slide 8Download PNG

Auto-generated from Microsoft Defender for Endpoint explained. This page is not indexed and isn't part of the guide itself.