0% found this document useful (0 votes)
102 views3 pages

Pre-Requisite To OnBoard Windows Server 2012 & 2016 To MDE

To use Microsoft Defender for Endpoint on Windows Server 2012 R2 and 2016, several prerequisites must be met. For Windows Server 2012 R2, the latest monthly rollup package must be installed to ensure required components are present. For Windows Server 2016, the latest Servicing Stack Update and Cumulative Update from specific dates must be installed along with enabling and updating Microsoft Defender Antivirus. Additionally, the latest platform version via Windows Update or manually is required. Regular product updates and protection component updates for Defender for Endpoint are also needed by applying specific KB updates or approving them via Windows Update.

Uploaded by

salai keerthi
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
0% found this document useful (0 votes)
102 views3 pages

Pre-Requisite To OnBoard Windows Server 2012 & 2016 To MDE

To use Microsoft Defender for Endpoint on Windows Server 2012 R2 and 2016, several prerequisites must be met. For Windows Server 2012 R2, the latest monthly rollup package must be installed to ensure required components are present. For Windows Server 2016, the latest Servicing Stack Update and Cumulative Update from specific dates must be installed along with enabling and updating Microsoft Defender Antivirus. Additionally, the latest platform version via Windows Update or manually is required. Regular product updates and protection component updates for Defender for Endpoint are also needed by applying specific KB updates or approving them via Windows Update.

Uploaded by

salai keerthi
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 3

Prerequisite to On-Board Windows Server 2012 & 2016 to Microsoft

Defender for Endpoint


22-Febraury-2023 | Version 1.0

43 Global Awards | 42 National Awards | 18 years of global recognition


Services

Windows Server 2012 & 2016 Prerequisites

Prerequisites for Windows Server 2012 R2

If you've fully updated your machines with the latest monthly rollup package, there are no other
prerequisites and the below requirements will already be filled.

The installer package will check if the following components have already been installed via an
update to assess if minimum requirements have been met for a successful installation:

• Update for customer experience and diagnostic telemetry


• Update for Universal C Runtime in Windows

Prerequisites for Windows Server 2016

It's recommended to install the latest available SSU and LCU on the server.

• The Servicing Stack Update (SSU) from September 14, 2021 or later must be installed.
• The Latest Cumulative Update (LCU) from September 20, 2018 or later must be
installed.
• Enable the Microsoft Defender Antivirus feature and ensure it's up to date. For more
information on enabling Defender Antivirus on Windows Server, see Re-enable
Defender Antivirus on Windows Server if it was disabled and Re-enable Defender
Antivirus on Windows Server if it was uninstalled.
• Download and install the latest platform version using Windows Update. Alternatively,
download the update package manually from the Microsoft Update Catalog or
from MMPC.

Update packages for Microsoft Defender for Endpoint on Windows Server 2012 R2 and 2016

To receive regular product improvements and fixes for the EDR Sensor component, ensure
Windows Update KB5005292 gets applied or approved. In addition, to keep protection
components updated, see Manage Microsoft Defender Antivirus updates and apply baselines.

If you're using Windows Server Update Services (WSUS) and/or Microsoft Endpoint Configuration
Manager, this new "Microsoft Defender for Endpoint update for EDR Sensor" is available under the
category "Microsoft Defender for Endpoint".

The following steps are only applicable if you're using a third-party anti-malware solution. You'll
need to apply the following Microsoft Defender Antivirus passive mode setting. Verify that it was
configured correctly:

1|Page
Services

1. Set the following registry entry:


o Path: HKLM\SOFTWARE\Policies\Microsoft\Windows Advanced Threat
Protection
o Name: ForceDefenderPassiveMode
o Type: REG_DWORD
o Value: 1

Required group policy need to be update at all the Endpoint servers.

2|Page

You might also like

pFad - Phonifier reborn

Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.

Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.


Alternative Proxies:

Alternative Proxy

pFad Proxy

pFad v3 Proxy

pFad v4 Proxy