Forum Discussion
rybo3000
Aug 25, 2020Brass Contributor
Keeping Defender ATP in step with Windows versions
I'm noticing that Microsoft Defender ATP for US Government GCC High customers is supported up to Windows 10, version 1903. Since Feature Updates (Preview) is not yet available for government customers in Endpoint Manager/Intune: what is currently the best way to limit the max Windows version needed to be compatible with Defender ATP, using what we do have in Azure Gov/GCC High?
- I don't know if an Intune Only Policy exists for MAX Version. May have to look into ADMX or ADMX Backed Policy. We are working on a few different things I can think of that would help coming but nothing to announce or go into detail about. We also released Endpoint Security so maybe there is a setting there you can leverage. So, lots of options in a cloud-only world oof the top of my head I don't know if theres a MAX version.
- Danny_Guillory
Microsoft
rybo3000 There are a few ways to set that, GP is the 1st thing that comes to mind, but you also have Configuration Manager and EndpointManager Cloud. Another outside the box way could be leveraging compliance in MEM OnPrem or Cloud. Feel free to reply here are DM me if you would like to discuss in more detail and kick some ideas and thoughts.
- rybo3000Brass Contributor
Danny_Guillorythanks for identifying those tools! I wasn't sure if the "max version" settings for Device Compliance policies played a role in limiting Windows Updates. I'll reach out to discuss further!
- MaggieMcGrathCopper Contributor
Danny_Guillory most of my GCC High customers are focused on deploying cloud-only environments, so GP wouldn't work. Is there an Intune policy/configuration you could think of that might work?
- Danny_Guillory
Microsoft
I don't know if an Intune Only Policy exists for MAX Version. May have to look into ADMX or ADMX Backed Policy. We are working on a few different things I can think of that would help coming but nothing to announce or go into detail about. We also released Endpoint Security so maybe there is a setting there you can leverage. So, lots of options in a cloud-only world oof the top of my head I don't know if theres a MAX version.