You can setup policies, for example, to isolate an infected machine from talking to your other machines.
What makes it worthwhile is that you can manage AV and security policies on all of your machines at once from a cloud dashboard. The base client on the machines is the same Windows Defender that you get on a vanilla Win10 box. Sounds a bit convoluted, right? But, it makes sense if you think about it - the entire reason Defender ATP exists is for cloud management of endpoint security. Setup a Mac Defender Onboarding policy, assign it to a group, and enroll the Macs in InTune.
I'm not sure the procedure with Macs, but I know you can enroll them in InTune, and I know that they're compatible with Defender, so I'm fairly sure it's a similar process. As I recall, you onboard a machine via an InTune configuration policy, and then setup device compliance policies.
0 kommentar(er)
