29 April, 2021

Microsoft Defender for Endpoint: feature support by operating system and version

Updated 10 May with Live Response

As I was explaining to a customer that not all Microsoft Defender for Endpoint features were supported on previous Windows Server versions, they asked if there was a comparison table.

And... I couldn't find one. So I created one.

Operating System version EDR Live Response Microsoft Defender Antivirus (next-gen) Traditional AV ASR Exploit Guard TVM EDR Block Mode AIR Network Protection Controlled Folder Access
Windows 10 Pro, version 1709 or later Supported Supported Supported N/A Supported Supported Supported Supported Supported Supported Supported
Windows 10 Enterprise, version 1709 or later Supported Preview feature Supported N/A Supported Supported Supported Supported Supported Supported Supported
Windows Server, version 1809 (Semi-Annual Channel) or later Supported Preview feature Supported N/A Supported Supported Supported Supported Supported Supported
Windows Server, version 1803 Supported Supported N/A Supported Supported Supported Supported Supported Supported
Windows Server 2019 Supported Preview feature Supported N/A Supported Supported Supported Supported Supported Supported Supported
Windows 7 SCEP with use right OS vulnerabilities only
Windows 8.1 SCEP with use right Supported
Windows 10, versions 1607-1703 Supported N/A OS vulnerabilities only
Windows Server 2016 Supported Supported N/A Supported
Windows Server 2012 R2 Supported SCEP with use right Supported
Windows Server 2008 R2 SCEP with use right Supported
macOS 10.14 "Mojave" and above OS and software product vulnerabilities only
Linux Preview
Tagged: