Onboard Windows servers to the Microsoft Defender for Endpoint service

Applies to:

• Windows Server 2012 R2
• Windows Server 2016
• Windows Server Semi-Annual Enterprise Channel
• Windows Server 2019 and later
• Windows Server 2019 core edition
• Windows Server 2022
• Microsoft Defender for Endpoint

Defender for Endpoint extends support to also include the Windows Server operating system. This support provides advanced attack detection and investigation capabilities seamlessly through the Microsoft 365 Defender console. Support for Windows Server provides deeper insight into server activities, coverage for kernel and memory attack detection, and enables response actions.

This topic describes how to onboard specific Windows servers to Microsoft Defender for Endpoint.

For guidance on how to download and use Windows Security Baselines for Windows servers, see Windows Security Baselines.