It is built-in, cloud powered, and leverages the Microsoft Intelligence Security Graph to. Windows Defender (ATP) enables enterprise customers to detect, investigate, and respond to advanced attacks and zero days on their networks-for up to six months, in a single timeline. Windows 10 Enterprise A5 includes Windows 10 Enterprise A3 plus Windows Defender Advanced Thread Protection (ATP).The UEFI scanner is a new component of the built-in antivirus solution on Windows 10 and gives Microsoft Defender ATP the unique ability to scan inside of the firmware filesystem and perform security assessment.You still need to manage Defender itself using ConfigMgr or Intune. ATP takes telemetry and other information from Defender giving you advanced threat protection by then working in conjunction with Defender to block those threats. Defender ATP is not a management tool for Defender.In order to manage Windows Defender using SCCM, do I have to enable the Endpoint Protection Point role? If I do have to enable that, when I deploy Last question is, if I use Defender ATP onboarding file, do I have to do ANY of the above, or are those settings then managed via ATP in the cloud?.
