Microsoft Defender for Cloud
Architecture and deploymentTutorial Enable Servers Plan
In brief
The documentation now states that disabling Defender for Servers for Azure subscriptions in public preview automatically offboards eligible servers. Switching from Plan 2 to Plan 1 does not trigger automatic offboarding.
What Defender admins need to know
Administrators should account for automatic offboarding when disabling the plan; no offboarding occurs when changing from Plan 2 to Plan 1.
Summaries are generated from the documentation change itself.
Documentation change
View on Microsoft LearnThe comparison below shows only the changed extract. Use the full-page view for complete context.
If you enabled Defender for Servers Plan 2 on a Log Analytics workspace, you need to disable it explicitly. To do that, navigate to the plans page for the workspace and toggle the switch to Off.
For Azure subscriptions in the public preview, turning off Defender for Servers triggers automatic offboarding for eligible servers. Changing from Plan 2 to Plan 1 doesn't trigger automatic offboarding. For more information, see Automatic Azure offboarding.
Enable Defender for Servers at the resource level
Although we recommend enabling the plan for an entire Azure subscription, you might need to mix plans, exclude specific resources, or enable Defender for Servers on specific machines only. To do this, you can enable or disable Defender for Servers at the resource level. Review deployment scope options before you start.
@@ -97,6 +97,8 @@ Note
If you enabled Defender for Servers Plan 2 on a Log Analytics workspace, you need to disable it explicitly. To do that, navigate to the plans page for the workspace and toggle the switch to **Off**.
+For Azure subscriptions in the public preview, turning off Defender for Servers triggers automatic offboarding for eligible servers. Changing from Plan 2 to Plan 1 doesn't trigger automatic offboarding. For more information, see [Automatic Azure offboarding](/en-us/defender-endpoint/offboard-machines#automatic-azure-offboarding).
+
## Enable Defender for Servers at the resource level
Although we recommend enabling the plan for an entire Azure subscription, you might need to mix plans, exclude specific resources, or enable Defender for Servers on specific machines only. To do this, you can enable or disable Defender for Servers at the resource level. Review [deployment scope options](plan-defender-for-servers-select-plan#decide-on-deployment-scope) before you start.