Managing and configuring the environment are not all the capabilities provided by the ConfigMgr server; a great feature is also fundamental protection against unwanted software, and a component responsible for this is Endpoint Protection. It is a part of the ConfigMgr used for hardening the environment against malware threats and for firewall rules configuration.
The ConfigMgr server provides the possibility of performing deployments, central management, and monitoring statuses of managed computers. In fact, Endpoint Protection is Windows Defender, which is managed using the ConfigMgr console. Endpoint Protection and Windows Defender have similar interfaces and settings.
The ConfigMgr server license does not contain a license for Endpoint Protection; it is necessary to buy the subscription separately.
These are the steps that need ...