Configure Microsoft Defender for Endpoint for Nonprofit (Antivirus)

This document will show you how to configure the Endpoint Protection solution Microsoft Defender for your nonprofit.

This uses the premium version of Microsoft Defender, which is included in the free licenses granted to nonprofits. More info here:How to Apply for FREE Nonprofit Microsoft 365 Services

Microsoft 365 Defender for Endpoint Setup

• Go to this Onboarding page to start enabling features, and wait until it reloads and redirects you to the dashboard. This can take 5-15 minutes. https://security.microsoft.com/onboard

• Open this policy management link in a new tab and walk through the wizard (if prompted), skipping all the steps that ask you to assign roles and notifications: https://security.microsoft.com/policy-management

• Cache-clear refresh the page (Crtl + Shift + R) to ensure all menu options are revealed.

• Navigate to: Settings > Endpoints >Advanced features. Enable the following:

  • Microsoft Defender for Cloud Apps

  • Unified audit log

  • Share endpoint alerts with Microsoft Compliance Center

  • Microsoft Intune connection

  • Save your changes.

• Verify in the Intune Portal that the connection to the Defender portal is active. Endpoint Security < Microsoft Defender for Endpoint

  • Connection Status should be Enabled

  • If it does not say Enabled:

    • Go back to the Security/Defender portal, and Settings > Endpoints >Advanced features. and toggle the Microsoft Intune connection OFF, Save, then toggle it back on again and Save.

Next, you need to configure policies for the following, in the Intune portal:

• AV Policy

• ASR Policy

• EDR Policy

The Good Heart Tech team has the automation and skillset to enable the seamless deployment of all of the above settings and policies. Contact us if you need assistance with deployment.