https://vertho.tech/tags/defender-for-endpoint/Recent content in Defender for Endpoint on VerthoHugoen-usWed, 28 Jan 2026 22:59:35 +0100https://vertho.tech/2026/01/28/defender-for-endpoint-migration-troubleshooting-persistent-third-party-av-registration/Wed, 28 Jan 2026 22:59:34 +0100https://vertho.tech/2026/01/28/defender-for-endpoint-migration-troubleshooting-persistent-third-party-av-registration/A third-party antivirus stays registered in Windows after uninstalling it and keeps Defender in a disabled state. How we found and removed the leftover registration.https://vertho.tech/2025/10/22/remotely-intune-wipe-devices-in-defender-for-endpoint-isolation-mode/Wed, 22 Oct 2025 15:12:10 +0100https://vertho.tech/2025/10/22/remotely-intune-wipe-devices-in-defender-for-endpoint-isolation-mode/Using the new isolation exclusions in Defender for Endpoint to remotely wipe a device with Intune while it stays in isolation mode.https://vertho.tech/2025/08/27/guidance-on-how-to-manage-products-updates-for-defender-for-server-on-linux-distributions/Wed, 27 Aug 2025 08:43:50 +0100https://vertho.tech/2025/08/27/guidance-on-how-to-manage-products-updates-for-defender-for-server-on-linux-distributions/How to manage Defender for Endpoint product updates on Linux servers: package managers, update rings and the approach I recommend to customers.https://vertho.tech/2025/06/23/defender-av-mystery-solving-the-source-files-could-not-be-found/Mon, 23 Jun 2025 19:39:17 +0100https://vertho.tech/2025/06/23/defender-av-mystery-solving-the-source-files-could-not-be-found/Enabling the Defender Antivirus role on a Windows Server fails with "source files could not be found". Why this happens and how to solve it.https://vertho.tech/2025/06/07/mde-troubleshooter-v1-6-1-available/Sat, 07 Jun 2025 07:58:59 +0100https://vertho.tech/2025/06/07/mde-troubleshooter-v1-6-1-available/MDE-Troubleshooter v1.6.1 adds more Performance Analyzer options, new ASR rules and checks for Device Control, proxy settings and outdated signatures.https://vertho.tech/2025/04/14/using-azure-arc-only-for-defender-for-servers-or-azure-monitoring-agent-lock-it-down/Mon, 14 Apr 2025 11:09:13 +0100https://vertho.tech/2025/04/14/using-azure-arc-only-for-defender-for-servers-or-azure-monitoring-agent-lock-it-down/If you only use Azure Arc for Defender for Servers or the Azure Monitoring Agent, disable the features you do not need. The security risks and how to lock it down.https://vertho.tech/2025/02/19/unleash-the-power-of-enterprise-exposure-graph-managed-identities-permissions-overview/Wed, 19 Feb 2025 16:57:07 +0100https://vertho.tech/2025/02/19/unleash-the-power-of-enterprise-exposure-graph-managed-identities-permissions-overview/Use the Enterprise Exposure Graph in Microsoft Exposure Management to build an overview of all managed identities and their Azure permissions with KQL.https://vertho.tech/2025/01/07/after-2-years-a-new-release-of-mde-troubleshooter/Tue, 07 Jan 2025 14:57:43 +0100https://vertho.tech/2025/01/07/after-2-years-a-new-release-of-mde-troubleshooter/MDE-Troubleshooter gets its first update in two years: new ASR rules, file hash computation check, Client Analyzer download and signature updates.https://vertho.tech/2025/01/03/new-ebook-demystifying-microsoft-defender-for-servers-by-james-agombar/Fri, 03 Jan 2025 15:07:30 +0100https://vertho.tech/2025/01/03/new-ebook-demystifying-microsoft-defender-for-servers-by-james-agombar/A new eBook by James Agombar covers the architecture, licensing, features and deployment of Defender for Servers. I was one of the technical reviewers.https://vertho.tech/2024/11/27/fix-sense-service-stuck-in-start_pending-on-ws2012r2-or-ws2016-check-oobe/Wed, 27 Nov 2024 14:57:16 +0100https://vertho.tech/2024/11/27/fix-sense-service-stuck-in-start_pending-on-ws2012r2-or-ws2016-check-oobe/The SENSE service stays in START_PENDING after onboarding Windows Server 2012 R2 or 2016 to Defender for Endpoint. The cause is OOBE, and here is the fix.https://vertho.tech/2024/03/06/tutorial-how-to-enable-disable-defender-for-servers-plans-at-resources-level/Wed, 06 Mar 2024 10:47:14 +0100https://vertho.tech/2024/03/06/tutorial-how-to-enable-disable-defender-for-servers-plans-at-resources-level/Tutorial: enable or disable Defender for Servers plans on individual resources instead of the whole subscription, using the REST API.https://vertho.tech/2023/08/28/defender-for-endpoint-for-linux-new-capabilities-and-enhancements/Mon, 28 Aug 2023 12:05:10 +0100https://vertho.tech/2023/08/28/defender-for-endpoint-for-linux-new-capabilities-and-enhancements/The new capabilities of Defender for Endpoint on Linux explained: the eBPF-based sensor, performance improvements and how to benefit from them.https://vertho.tech/2023/08/04/microsoft-defender-for-endpoint-security-management-mde-attach-v2-on-linux-a-deep-dive/Fri, 04 Aug 2023 12:51:51 +0100https://vertho.tech/2023/08/04/microsoft-defender-for-endpoint-security-management-mde-attach-v2-on-linux-a-deep-dive/A deep dive into how Defender for Endpoint security settings management (MDE Attach v2) enrolls and applies policy on Linux, step by step.https://vertho.tech/2023/06/15/microsoft-defender-for-endpoint-settings-management-enhancements/Thu, 15 Jun 2023 10:54:47 +0100https://vertho.tech/2023/06/15/microsoft-defender-for-endpoint-settings-management-enhancements/What changed in Defender for Endpoint security settings management (MDE Attach): simpler requirements, the new enrollment flow and system labels.https://vertho.tech/2023/06/14/unleash-the-power-of-defender-for-servers-plan-2-agentless-scanning-part-3/Wed, 14 Jun 2023 13:53:39 +0100https://vertho.tech/2023/06/14/unleash-the-power-of-defender-for-servers-plan-2-agentless-scanning-part-3/What agentless scanning in Defender for Servers Plan 2 is, how it works behind the scenes and how to enable it. Part 3 of the series.https://vertho.tech/2023/02/01/block-the-automated-onboarding-of-defender-for-endpoint-without-disabling-the-integration-in-defender-for-cloud/Wed, 01 Feb 2023 12:30:00 +0100https://vertho.tech/2023/02/01/block-the-automated-onboarding-of-defender-for-endpoint-without-disabling-the-integration-in-defender-for-cloud/How to stop Defender for Cloud from automatically onboarding servers to Defender for Endpoint while keeping the integration enabled. Originally published on Medium.https://vertho.tech/2022/07/27/defender-for-servers-mde-onboarding-behind-the-scenes/Wed, 27 Jul 2022 14:13:00 +0100https://vertho.tech/2022/07/27/defender-for-servers-mde-onboarding-behind-the-scenes/What happens behind the scenes when Defender for Servers onboards a machine to Defender for Endpoint. Originally published on Medium.