See below an overview of all the built-in policies that Microsoft has published for the various Microsoft Defender plans in Microsoft Defender for Cloud and the recommendation they resolve: RecommendationĪzure Defender for servers should be enabledĬonfigure Azure Defender for servers to be enabled All you have to do is assign the policies below on the scope – a Management Group in this case – under which all subscriptions should have Microsoft Defender enabled automatically. Many don’t know that you can easily manage these settings at scale using Azure Policy, so that the desired configuration is automatically set when you request a new subscription.
And thus be forgotten when a new subscription becomes available. In many cases, the cause can be found in manually managing the environment settings (former ‘Pricing Settings’), where all plans must be enabled for each new subscription. I regularly come across Azure environments where the Microsoft Defender plans are not enabled, which is desired.
0 kommentar(er)
