How to Buy Microsoft Defender for Endpoint Standalone Licensing
Pay-as-you-go / Direct
Infused Innovations CSP
Enterprise Agreement (EA)
* A dedicated customer support team requires the minimum purchase of 25 licenses.
Note: US-based organizations only. Accepting Infused Innovations as your CSP provider requires accepting our Master Services Agreement.
Request a Subscription
If your devices are running Windows 10 and are Hybrid Azure AD Joined, then no additional cloud licensing is required. This scenario does require your device to be domain joined and then synced to AAD via Azure AD Connect. There are additional Group Policy settings that must be configured to enable Hybrid AADJ. Our engineers can assist you with this configuration via an onboarding accelerator if desired.
However, if you do not have legacy Active Directory or if you're using macOS, then you will also need to purchase an Intune license to Azure AD Join your device.
Yes. In September of 2020, Microsoft Defender ATP was rebranded to Microsoft Defender for Endpoints (MDE). Defender for Endpoints is Microsoft's EDR product and is part of the newly named Microsoft Defender XDR suite. Prior to 2019, the product was called Windows Defender ATP. Other recently rebranded products include:
- Microsoft Defender for Endpoints replaces MD ATP
- Microsoft Defender for Office 365 replaces Office 365 ATP
- Microsoft Defender for Identity replaces Azure ATP
- Microsoft 365 Defender replaces Microsoft Threat Protection
- Azure Defender for Servers replaces Azure Security Center Standard
- Azure Defender for IoT replaces ASC for IoT
- Azure Defender for SQL replaces ATP for SQL
Microsoft has removed the Windows E3 license pre-requirement from Microsoft Defender Advanced Threat Protection. Previously, in order to get Microsoft Defender ATP (Windows E5) customers were required to first activate Windows Enterprise (Windows E3) before they could get Microsoft Defender ATP.
With the standalone SKU, customers are now able to purchase Microsoft Defender ATP for their all supported client devices regardless of their Windows E3 license ownership and without the requirement to first have Windows E3. Meaning, those that have Windows Pro can now buy Microsoft Defender ATP directly.
There is no change to existing Windows E5, M365 E5 Security, and M365 E5 offers as those will continue including MDATP.
There has been demand from customers who want to purchase Microsoft Defender ATP but who do not have or do not want Windows E3. This new SKU will help to unblock customers who are in this scenario.
Any device running Windows Pro or Mac devices. The previously announced standalone Microsoft Defender ATP for Mac is now part of this offer.
All Microsoft Defender ATP components are included in this SKU. This includes Threat and Vulnerability Management, Attack Surface Reduction, Next Generation Protection, Endpoint Detection and Response, Auto Investigation and Remediation, Microsoft Threat Experts, and centralized configuration, management, and rich APIs.
No. Windows E3 has a number of capabilities that Windows Pro does not have. There are security capabilities that are not part of Windows Pro that require an E3 license. Buying the standalone SKU does not entitle Windows Pro users to Windows E3 capabilities. The following security capabilities require a Windows E3 license and will not work if the customer moves from Windows 10 E3 to Microsoft Defender ATP standalone:
- Application Guard
- Application Control Guard
- Credential Guard
- Device Guard
- Exploit Guard
- System Guard
- Virtualization Based Security