Next we move down to Threat protection, and you can start to see more of the Microsoft 365 integration pieces, with MDATP and MCAS, but remember, MCAS isn’t included here, just MDATP. In this example I’ll let it make the decisions, but in a production environment you would want to set it up in advance in order to meet your own naming and other governance requirements. Moving down to Data Collection, you can see that Auto Provisioning is enabled, and we either allow the automatic creation of a Log Analytics workspace or if you want to create your own. At a bare minimum you want to enable Standard tier on Virtual machines. If you aren’t familiar with Azure Security Center functionality, the Pricing tier page introduces these at a top level, but the only one we are really going to focus on is Threat protection for Azure VMs and non-Azure servers (including Serer EDR), which is provided via MDATP. Now you can see that we have Standard pricing tier enabled under Pricing & Settings. Choose Install agents to automatically install the Microsoft Monitoring Agent to any virtual machines we provision.

Upgrade from Basic to Standardīecause this is a new tenant and a new subscription, there aren’t any resource to protect just yet, but we add a virtual machine to trigger the provisioning of MDATP later. Click on Upgrade to enable Standard protection. In this case it’s a single subscription in the tenant, but if this tenant had multiple subscriptions I could pick and choose which ones you want to protect. You add Azure Security Center (ASC) to your Azure tenant by choosing add a resource and then choosing Azure Security Center. You can use whatever type of subscription you have access to that supports chargeable Azure services for these steps Step 1: Set Up Azure Security Center

I’ve added an Azure subscription to this tenant in order to perform the following steps. In this post we switch over to the Azure Portal to set up Azure Security Center as our gateway into the world of MDATP. In the first post in this series I explained the reasons behind the alternate approach I’m taking to adding Microsoft Defender Advanced Threat Protection (MDATP) into a Microsoft 365 Business Premium (M365BP) tenant, and went through my preferred approach to setting up a new tenant.

How to enable microsoft defender