Daily Defender News
Aboutmerill.net
Microsoft Defender for Endpoint
Endpoint protection

Migrate devices to use the streamlined connectivity method

4 September 2026Doc update+54 / −33 lines

In brief

The guide adds clearer sections and anchors for migrating Windows 10/11, Windows Server, VDI devices, and deployment methods such as local scripts, Group Policy, Intune, and Configuration Manager.

What Defender admins need to know

Administrators can use the more specific sections and links to find the applicable migration guidance.

Summaries are generated from the documentation change itself.

Documentation change

View full page diffView on Microsoft Learn

The comparison below shows only the changed extract. Use the full-page view for complete context.

Migrate devices to use the streamlined connectivity method

Migrating devices using the streamlined method

Use the following guidance to migrate previously onboarded devices to the streamlined connectivity method for each supported operating system and deployment tool.

Review migration recommendations before switching connectivity methods

  • Complete migration. At this stage, you can gradually roll out the migration to a larger set of devices. To complete the migration, you can replace previous onboarding policies and remove the old URLs from your network device.

Validate device prerequisites before proceeding with any migrations. This articlemigration guide builds upon Onboarding devices using streamlined connectivity by focusing on migrating existing devices.

To reonboard devices, you need to use the streamlined onboarding package. For more information on how to access the package, see Streamlined connectivity.

Windows 10 and 11

Use the following options to migrate Windows 10 and Windows 11 devices to the streamlined connectivity method.

Migrate Windows 10 and Windows 11 devices

Confirm prerequisites are met: Prerequisites for using streamlined method.

LocalMigrate devices using a local script

Follow the guidance in Local script (up to 10 devices) using the streamlined onboarding package. After completing the local script onboarding steps, you must restart the device for device connectivity to switch over.

Migrate devices using Group policyPolicy

Follow the guidance in Group policy using the streamlined onboarding package. After completing the Group Policy onboarding steps, you must restart the device for device connectivity to switch over.

Migrate devices using Microsoft Intune

Follow the guidance in Intune using the streamlined onboarding package. You can use the "auto from connector" option; however, thisthe "auto from connector" option doesn't automatically reapply the onboarding package. Create a new onboarding policy and target a test group first. After completing the Intune onboarding steps, you must restart the device for device connectivity to switch over.

Migrate devices using Microsoft Configuration Manager

Follow the guidance in Configuration Manager.

Migrate VDI devices using the streamlined method

Use the guidance in Onboard non-persistent virtual desktop infrastructure (VDI) devices. After completing the VDI onboarding steps, you must restart the device for device connectivity to switch over.

Windows Server

Use the following options to migrate Windows Server devices to the streamlined connectivity method.

Migrate Windows Server devices

For general information on onboarding Windows server devices, see Onboard Windows servers to the Microsoft Defender for Endpoint service.

Devices already onboarded don't reonboard automatically. Turn on the following Advanced Feature setting in the Microsoft Defender portal (Settings > Endpoints > Advanced Features) and select the option "Apply streamlined connectivity settings to devices managed by Intune and Defender for Cloud". Newly added devices start using the new onboarding information within ~48 hours. To reonboard existing devices, apply the onboarding script - see Onboard Windows servers to the Microsoft Defender for Endpoint service.

Migrate Windows Server devices using Microsoft Configuration Manager

Follow the guidance in Configuration Manager to deploy a new policy.

Migrate Windows Server devices using Group policyPolicy

Follow the guidance in Group policy using the streamlined onboarding package. After completing the Group Policy onboarding steps, you must restart the device for device connectivity to switch over.

Migrate Windows Server VDI devices

Follow the guidance in Onboard non-persistent virtual desktop infrastructure (VDI) devices. After completing the VDI onboarding steps, you must restart the device for device connectivity to switch over.

macOS

Use the following options to migrate macOS devices to the streamlined connectivity method.

Migrate macOS devices

For general information on onboarding macOS devices, see Microsoft Defender for Endpoint on macOS.

Confirm prerequisites are met: Prerequisites for streamlined method.

LocalMigrate macOS devices using a local script

Follow the guidance in Manual deployment for Microsoft Defender for Endpoint on macOS using the streamlined onboarding package.

After completing the manual macOS onboarding steps, you must either reboot the device or restart the Defender for Endpoint service for connectivity to switch over.

Migrate macOS devices using Microsoft Intune

Use the following steps to migrate macOS devices with Microsoft Intune:

Linux

Migrate Linux devices

For general information on onboarding Linux devices, see Microsoft Defender for Endpoint on Linux.

Confirm prerequisites are met: Prerequisites for streamlined method.

LocalMigrate Linux devices using a local script

Use the guidance in Deploy Microsoft Defender for Endpoint on Linux manually using the streamlined onboarding package.

After completing the Linux manual onboarding steps, you must either reboot the device or restart the service using sudo systemctl restart mdatp.

Device connectivity to streamlined approach doesn't start if you don't reboot the device.

You can use advanced hunting in Microsoft Defender portal to view the connectivity type status.

This informationConnectivity type status is found in the DeviceInfo table under the "ConnectivityType" column:

  • Column Name: ConnectivityType
  • Possible Values: <blank>, Streamlined, Standard
  • Data type: String

Test Block at First Sight

Follow the Block at First Sight (BAFS) demonstration instructions in Microsoft Defender for Endpoint Block at First Sight (BAFS) demonstration.

Test SmartScreen

Follow the SmartScreen demonstration instructions inon the Microsoft Defender SmartScreen Demo (msft.net). page.

PowerShell detection test

Tracking with advanced hunting in Microsoft Defender

To view allRun the following query to list onboarded devices and show the most recent connectivity type reported for each device (limit 30k) and their most recently reported connectivity type::

DeviceInfo
| summarize arg_max(ConnectivityType, Timestamp) by DeviceName

ToRun the following query to view a count of Devicesonboarded devices grouped by OSPlatformoperating system platform and their connectivity type intype, rendered as a bar chart:

DeviceInfo