From b9d2c85da0d3f33c4f61deb94d1febce9248f268 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Fri, 16 Oct 2020 16:15:21 -0700 Subject: [PATCH] flow --- .../deployment-phases.md | 2 +- .../deployment-strategy.md | 62 +++++++++--------- .../images/onboarding-flow-diagram.png | Bin 0 -> 11048 bytes .../microsoft-defender-atp/onboarding.md | 15 +++++ 4 files changed, 47 insertions(+), 32 deletions(-) create mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/onboarding-flow-diagram.png diff --git a/windows/security/threat-protection/microsoft-defender-atp/deployment-phases.md b/windows/security/threat-protection/microsoft-defender-atp/deployment-phases.md index de3035470d..d7a6abadf1 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/deployment-phases.md +++ b/windows/security/threat-protection/microsoft-defender-atp/deployment-phases.md @@ -33,7 +33,7 @@ There are three phases in deploying Microsoft Defender ATP: |:-------|:-----| | ![Phase 1: Prepare](images/prepare.png)
[Phase 1: Prepare](prepare-deployment.md)| Learn about what you need to consider when deploying Microsoft Defender ATP:

- Stakeholders and sign-off
- Environment considerations
- Access
- Adoption order | ![Phase 2: Setup](images/setup.png)
[Phase 2: Setup](production-deployment.md)| Take the initial steps to access Microsoft Defender Security Center. You'll be guided on:

- Validating the licensing
- Completing the setup wizard within the portal
- Network configuration| -| ![Phase 3: Onboard](images/onboard.png)
[Phase 3: Onboard](onboarding.md) | Onboard devices to the service so the Microsoft Defender ATP service can get sensor data from them. You'll be guided on:

- Using Microsoft Endpoint Configuration Manager to onboard devices
- Configure capabilities +| ![Phase 3: Onboard](images/onboard.png)
[Phase 3: Onboard](onboarding.md) | Onboard devices to the service so the Microsoft Defender ATP service can get sensor data from them. diff --git a/windows/security/threat-protection/microsoft-defender-atp/deployment-strategy.md b/windows/security/threat-protection/microsoft-defender-atp/deployment-strategy.md index 918cc78035..e58ed6fb0a 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/deployment-strategy.md +++ b/windows/security/threat-protection/microsoft-defender-atp/deployment-strategy.md @@ -1,5 +1,5 @@ --- -title: Plan your Microsoft Defender ATP deployment strategy +title: Plan your Microsoft Defender ATP deployment description: Select the best Microsoft Defender ATP deployment strategy for your environment keywords: deploy, plan, deployment strategy, cloud native, management, on prem, evaluation, onboarding, local, group policy, gp, endpoint manager, mem search.product: eADQiWindows 10XVcnh @@ -16,7 +16,7 @@ ms.collection: M365-security-compliance ms.topic: article --- -# Plan your Microsoft Defender ATP deployment strategy +# Plan your Microsoft Defender ATP deployment [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] @@ -27,51 +27,51 @@ ms.topic: article Depending on the requirements of your environment, we've put together material to help guide you through the various options you can adopt to deploy Microsoft Defender ATP. +This article provides an overview on the general steps you need to take to deploy Microsoft Defender ATP: -You can deploy Microsoft Defender ATP using various management tools. In general the following management tools are supported: +![Image of deployment flow](images/onboarding-flow-diagram.png) -- Group policy -- Microsoft Endpoint Configuration Manager -- Mobile Device Management tools -- Local script -| Endpoint | Deployment methods | -|--------------|------------------------------------------| -| **Windows** | Local script (up to 10 devices)
Group Policy
Microsoft Endpoint Manager
Mobile Device Manager
Microsoft Endpoint Configuration Manager
Microsoft Endpoint Configuration Manager
VDI scripts | -| **macOS** | Local scripts
Mobile Device Manager/Microsoft Intune
JAMF Pro
| -| **Linux Server** | Local script
Puppet
Ansible| -| **iOS** | App-based | -| **Android** | Microsoft Endpoint Manager | -## Microsoft Defender ATP deployment strategy -Depending on your environment, some tools are better suited for certain architectures. +## Step 1: Identify architecture +We understand that every enterprise environment is unique, so we've provided several options to give you the flexibility in choosing how to deploy the service. +Depending on your environment, some tools are better suited for certain architectures. + +Use the following material to select the appropriate Microsoft Defender ATP architecture that best suites your organization. |**Item**|**Description**| |:-----|:-----| |[![Thumb image for Microsoft Defender ATP deployment strategy](images/mdatp-deployment-strategy.png)](https://github.com/MicrosoftDocs/windows-itpro-docs/raw/public/windows/security/threat-protection/microsoft-defender-atp/downloads/mdatp-deployment-strategy.pdf)
[PDF](https://github.com/MicrosoftDocs/windows-itpro-docs/raw/public/windows/security/threat-protection/microsoft-defender-atp/downloads/mdatp-deployment-strategy.pdf) \| [Visio](https://github.com/MicrosoftDocs/windows-itpro-docs/raw/public/windows/security/threat-protection/microsoft-defender-atp/downloads/mdatp-deployment-strategy.vsdx) | The architectural material helps you plan your deployment for the following architectures: