Hello wangting 王婷6,
Welcome to Microsoft Q&A Platform. Thank you for reaching out & hope you are doing well.
So, Azure Stack licensing covers the infrastructure and platform components but does not bundle Microsoft Defender for Endpoint or Defender Antivirus licenses for the servers (nodes) running under Azure Stack. These security solutions require separate licenses. Defender for Endpoint licenses are typically per device/server and require purchase or entitlement separately. Defender Antivirus is included in newer Windows Server versions, but full Defender for Endpoint advanced features require explicit license activation and may need Defender for Servers Plan 1 or Plan 2 licenses when used in hybrid or on-premises environments.
To clarify your doubts:
- Azure Stack licensing does not include Microsoft Defender for Endpoint or Defender Antivirus licenses for node servers.
- You need separate licensing for Defender for Endpoint, such as Defender for Servers Plan 1 or Plan 2 (via Defender for Cloud), or standalone Defender for Endpoint licenses for server workloads.
- Microsoft Defender Antivirus is included as part of Windows Server OS on Azure Stack nodes, but for advanced threat protection and management, Defender for Endpoint licenses need to be purchased and configured.
- For Azure Stack Hub, Defender Antivirus is updated and managed as part of the monthly updates, but licensing is separate.
Please do refer below documents for reference:
- Update Microsoft Defender Antivirus on Azure Stack Hub - Microsoft Docs
- Microsoft Defender for Endpoint licensing requirements - Microsoft Docs
- Common questions about Defender for Servers licensing - Microsoft Docs
Hope this helps! If it answered your question, please consider clicking Accept Answer and Upvote. This will help us and others in the community as well.
If you need more info, feel free to ask in the comments. Happy to help!
Regards,
Monalisha