This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(35.2, 26%, 13%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EB%3C/text%3E%3C/svg%3E)
Hello
For servers that are onboarded to Defender for Cloud and have the server plan activated, are the AV policies controlled from the Endpoint security policies?
Can Servers have endpoint security policies pushed to them, even if they are not onboarded to Intune?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(214.4, 81%, 30%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMT%3C/text%3E%3C/svg%3E)
Hi @berketjune2012 ,
Yes, the antivirus policies are controlled from the Endpoint security policies. This is noted here: https://learn.microsoft.com/en-us/mem/intune/protect/endpoint-security-antivirus-policy
If servers are not onboarded to Intune, they cannot have endpoint security policies pushed to them since these are a feature of Intune. https://learn.microsoft.com/en-us/mem/intune/protect/endpoint-security
Let me know if this addresses your question.
If the information helped you, please Accept the answer. This will help us as well as others in the community who may be researching similar questions.
@Marilee Turscak-MSFT What is the process to onboard a Windows server into Intune? From my understanding only Windows 10/11 can be onboarded?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(48, 30%, 14%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJC%3C/text%3E%3C/svg%3E)
Not sure why this is the accepted answer as you can still have security policies applied to devices that werent onboarded to Intune via security settings management
Hi Berketjune,
The settings in the Defender portal is a good start for the Defender settings.
Intune will provide a more granular approach to policy configuration.
And of course powershell and Group Policy are other options.
From the articles you posted, it looks like the server doesn't actually have to be onboarded to Intune for the endpoint policies to push out.
Basically I would onboard the server to Defender for Endpoint and then simply apply the policies from the endpoint security portal?
Hey @berketjune2012 , I am no stretch an expert in this matter but have gone through this task just now and am still trying to understand certain elements of this BUT
I found this guide very helpful https://www.oceanleaf.ch/defender-for-endpoint-security-settings-management/ for the settings I need configured in the tenant, In conjunction of course with enabling defender for cloud servers. Once you have that done and the servers are onboarded and put into a dynamic group, You can create and apply policies via configuration management for AV etc then to your group