Pre-Requisite To OnBoard Windows Server 2012 & 2016 To MDE
Pre-Requisite To OnBoard Windows Server 2012 & 2016 To MDE
If you've fully updated your machines with the latest monthly rollup package, there are no other
prerequisites and the below requirements will already be filled.
The installer package will check if the following components have already been installed via an
update to assess if minimum requirements have been met for a successful installation:
It's recommended to install the latest available SSU and LCU on the server.
• The Servicing Stack Update (SSU) from September 14, 2021 or later must be installed.
• The Latest Cumulative Update (LCU) from September 20, 2018 or later must be
installed.
• Enable the Microsoft Defender Antivirus feature and ensure it's up to date. For more
information on enabling Defender Antivirus on Windows Server, see Re-enable
Defender Antivirus on Windows Server if it was disabled and Re-enable Defender
Antivirus on Windows Server if it was uninstalled.
• Download and install the latest platform version using Windows Update. Alternatively,
download the update package manually from the Microsoft Update Catalog or
from MMPC.
Update packages for Microsoft Defender for Endpoint on Windows Server 2012 R2 and 2016
To receive regular product improvements and fixes for the EDR Sensor component, ensure
Windows Update KB5005292 gets applied or approved. In addition, to keep protection
components updated, see Manage Microsoft Defender Antivirus updates and apply baselines.
If you're using Windows Server Update Services (WSUS) and/or Microsoft Endpoint Configuration
Manager, this new "Microsoft Defender for Endpoint update for EDR Sensor" is available under the
category "Microsoft Defender for Endpoint".
The following steps are only applicable if you're using a third-party anti-malware solution. You'll
need to apply the following Microsoft Defender Antivirus passive mode setting. Verify that it was
configured correctly:
1|Page
Services
2|Page