Microsoft Defender for Endpoint
Endpoint protectionEndpoint Security Policies Configure
In brief
The documentation now states that Endpoint security policy management cannot be used on devices with an MMA-delivered sensor. On Windows 7 SP1 and Windows Server 2008 R2 SP1, only Microsoft Defender Antivirus policy is supported.
What Defender admins need to know
Admins should review affected devices and upgrade them if broader endpoint security policy management is required.
Summaries are generated from the documentation change itself.
Documentation change
View on Microsoft LearnThe comparison below shows only the changed extract. Use the full-page view for complete context.
- m365-security
- tier2
ms.topic: how-to
ms.date:
07/06/08/03/2026 appliesto:- Microsoft Defender for Endpoint Plan 1
- Microsoft Defender for Endpoint Plan 2
The following table lists the endpoint security policy types you can manage and the platforms that each type supports:
| Policy | Windows | macOS | Linux |
|---|---|---|---|
| Attack surface reduction (ASR) rules | Yes |
@@ -9,7 +9,7 @@ ms.collection: - m365-security - tier2 ms.topic: how-to-ms.date: 07/06/2026+ms.date: 08/03/2026 appliesto: - Microsoft Defender for Endpoint Plan 1 - Microsoft Defender for Endpoint Plan 2@@ -32,6 +32,11 @@ The **Endpoint security policies** page is available in the [Microsoft Defender The following table lists the endpoint security policy types you can manage and the platforms that each type supports: +> [!NOTE]+> You can't use Endpoint security policy management on devices that are running a sensor delivered by the Microsoft Monitoring Agent (MMA). For more information on how to upgrade these devices, see [Use the Defender deployment tool to deploy Defender endpoint security](/defender-endpoint/onboard-downlevel#use-the-defender-deployment-tool-to-deploy-defender-endpoint-security).+>+> Also, only the **Microsoft Defender Antivirus** policy is supported on Windows 7 SP1 and Windows Server 2008 R2 SP1.+ |Policy|Windows|macOS|Linux| |---|:---:|:---:|:---:| |[Attack surface reduction (ASR) rules](attack-surface-reduction-rules-overview.md)|Yes|||