Check you have the latest ADMX templates for your OS.VDI specific Defender settings that are configured on local group policy on the master image, and remaining settings configured on domain group policy.2x scheduled tasks, one to perform the definition download and unpack, and a second to clean-up old definitions.

1x SMB file and an endpoint for handling the scheduled tasks needed for Defender definition updates.

The guide does not cover how to configure VM’s to use MMPC, WSUS, Cloud based definitons or ATP/MAPS.Įnvironment: VMWare Instant Clones, Win 10 1909.

I recently had to setup a proof of concept of this for a client who had been using McAfee ENS and we saw a notable improvement in performance and overall desktop experience. Windows Defender AV for non-persistent instant clone desktops is a lightweight and free AV solution for VDI that is growing in popularity as an alternative to typical third party options as people move to O365 and want to align themselves with Microsoft across their software stack.īelow is a quick guide on how to configure Defender for Endpoint ( not ATP) which is a free version of Defender included with E3 O365 licensing using.Ī file share is used as the source for definition files.

Windows server vdi setup