Daily Defender News
Aboutmerill.net
Microsoft Defender for Business
Endpoint protection

Set up and Configure Microsoft Defender for Business - Microsoft Defender for Business | Microsoft Learn

6 October 2026Doc update+17 / −17 lines

In brief

The guide has revised wording and capitalization, linked portal references, punctuation, and formatting for the Intune enrollment option.

What Defender admins need to know

Administrators get clearer navigation and more readable setup instructions.

Summaries are generated from the documentation change itself.

Documentation change

View full page diffView on Microsoft Learn

The comparison below shows only the changed extract. Use the full-page view for complete context.

Set up and configureConfigure Microsoft Defender for Business - Microsoft Defender for Business | Microsoft Learn

This article describes the overall setup process for Defender for Business.

Setup options

When you're ready to set up and configure Defender for Business, you can choose from severalthe following options:

  • Use the setup wizard to grant access to your security team, set up email notifications for your security team, onboard your company's Windows devices, and apply default security settings to those devices; ordevices.
  • Work through the setup process manually, step by step, and complete the setup steps yourself.

Note Using the setup wizard is optional. If you choose not to use the wizard, or if the wizard is closed before your setup process is complete, you can complete the setup and configuration process on your own.

Setup wizard

  1. Get Defender for Business. Start a trial or paid subscription today. You can choose from the standalone version of Defender for Business, or get it as part of Microsoft 365 Business Premium. See Get Microsoft Defender for Business. And, ifIf you're planning to onboard servers, see How to get Microsoft Defender for Business servers.

    In the Microsoft Defender portal (Microsoft Defender portal), in the navigation pane, select Assets > Devices. If Defender for Business isn't provisioned yet, that process begins now.

  2. Add users and assign Defender for Business licenses. Do this task before you run the setup wizard. See Add users and assign licenses in Microsoft Defender for Business.

    While you're adding users, make sure toensure that you create a list of your security team's names and email addresses. This list comes in handy while you're using the setup wizard. To view a list of users, in the Microsoft 365 admin center (Microsoft 365 admin center), go to Users > Active users.

  3. In the Microsoft Defender portal (Microsoft Defender portal), in the navigation pane, select Assets > Devices. You should see the setup wizard home screen, as shown in the following image:

    Screenshot of wizard home screen to set up Defender for Business.

    Select Get started to begin using the wizard.

  4. Assign user permissions. In this first step of the setup wizard, you grant your security team access to the Microsoft Defender portal (Microsoft Defender portal). This portal is where you and your security team manage your security capabilities, view alerts, and take any needed actions on detected threats. Portal access is granted through roles that imply certain permissions. Learn more about roles and permissions.

    In Defender for Business, members of your security team can be assigned one of the following three roles:

    If your organization already has devices enrolled in Microsoft Intune, Defender for Business prompts you to continue using Intune, or switch to the simplified configuration process in the Microsoft Defender portal. For more information, see Choose where to manage security policies and devices.

    Defender for Business also offers automatic onboarding for Windows devices enrolled in Intune. Automatic onboarding is a simplified way to onboard Windows devices to Defender for Business. We recommend selecting the "all devices enrolled" option so that as Windows devices are enrolled in Intune, they're onboarded to Defender for Business automatically.

  5. Configure your security policies. Defender for Business includes default security policies for next-generation protection and firewall protection that you can be appliedapply to your company's devices. These default policies use recommended settings and are designed to provide strong protection for your devices. You can start with your default policies and add policies later. For more information, see Set up, review, and edit your security policies and settings.

  6. Select your next step. After the setup wizard is complete, you're prompted to choose a next step. For example, you can onboard devices, view your security dashboard, or view your security policies.

Manual setup

  1. Get Defender for Business. Start a trial or paid subscription today. You can choose from the standalone version of Defender for Business, or get it as part of Microsoft 365 Business Premium. For more information, see Get Microsoft Defender for Business. And, ifIf you're planning to onboard servers, see How to get Microsoft Defender for Business servers.
  2. Add users and assign licenses. Assign a license for Defender for Business (oror Microsoft 365 Business Premium)Premium to each member of your organization to protect their devices. Make sureEnsure multifactor authentication is enabled for all users. For more information, see Add users and assign licenses in Microsoft Defender for Business.
  3. Assign roles and permissions to your security team. People on your security team need certain permissions to perform tasks such as reviewing detected threats &and remediation actions, viewing &and editing policies, onboarding devices, and using reports. You can grant these permissions through roles. For more information, see Assign roles and permissions.
  4. Set up email notifications for your security team. As alerts are generated,generated or new vulnerabilities are discovered, people on your security team can be notified automatically, via email messages.automatically by email. For more information, see Set up email notifications.
  5. Onboard devices to Defender for Business. The sooner you getonboard your devices onboarded to Defender for Business, the sooner they're protected. You can onboard devices in the Microsoft Defender portal. Or, if your organization is already using Microsoft Intune, you can use it to enroll devices. For more information, see Onboard devices to Defender for Business.
  6. Set up and review your security policies and settings. Some security policies and settings are preconfigured with default settings in Defender for Business. OtherSet up other policies, such as web content filtering and attack surface reduction rules, must be set up.rules. For more information, see Configure your security settings and policies.

Important