Team: Huntress Managed Endpoint Detection and Response (EDR)
Product: Managed Microsoft Defender
Environment: Windows OS
Summary: How to set Managed Microsoft Defender policies at the account, organization, and endpoint level.
Overview
You can set Managed Defender policies in a few ways within the Huntress dashboard. This article will walk through the process of making those changes at each level.
If you are looking for the recommended settings for Managed Defender, please review our KB on the Huntress Recommended Managed Microsoft Defender Defaults.
Quick Links
1. Account Level Policy Configuration
2. Organization Level Policy Configuration
3. Endpoint Level Policy Configuration
Account Level Policy Configuration
- To configure the Managed Defender policy at the account level you will first need to navigate to the Managed Defender tab in the Huntress dashboard from the account level.
- Once on the Managed Defender dashboard at the account level, select the “Configure” button located on the “Managed Antivirus Status” bar.
-
From there, you can then set and configure the Managed Defender policy for all organizations and agents. Making the change here will set the same policy for everything under the account (unless an organization has its own policy set).
For policy recommendations, see Huntress Recommended Managed Microsoft Defender Defaults
Organization Level Policy Configuration
- To configure the Managed Defender policy at the organization level, you will first need to navigate to the Managed Defender tab in the Huntress dashboard from the desired organization.
- Once on the Managed Defender dashboard at the account level, select the “Configure” button located on the “Managed Antivirus Status” bar.
-
From there, you can then set and configure the Managed Defender policy for that organization and all agents under that org (unless an agent has its own individual policy enforced).
For policy recommendations, see Huntress Recommended Managed Microsoft Defender Defaults
Endpoint Level Policy Configuration
- To configure the Managed Defender policy at the endpoint level, you will first need to navigate to the Antivirus section from the endpoint/agent of choice.
-
Once there, select the “Policy Status” tab and then the “Configure” option. From there, you can set a policy that will only apply to that device.
For policy recommendations, see Huntress Recommended Managed Microsoft Defender Defaults