Merge pull request #2562 from ElazarK/wi556158-MMA-article-replaced

WI556158 added article back in

Author: Carolyn135

.openpublishing.redirection.defender-for-cloud.json

@@ -462,7 +462,7 @@
     },
     {
       "source_path_from_root": "/articles/defender-for-cloud/identify-sql-servers-protected-by-mma.md",
-      "redirect_url": "/azure/defender-for-cloud/defender-for-sql-servers-introduction",
+      "redirect_url": "/azure/defender-for-cloud/identify-sql-servers-protected-by-monitor-agent",
       "redirect_document_id": false
     },
     {

articles/defender-for-cloud/TOC.yml

@@ -145,6 +145,9 @@
                 - name: Update Defender for SQL Servers on Machines plan configuration
                   displayName: SQL, SQL servers, defender, machines
                   href: update-sql-machine-configuration.md
+                - name: Identify SQL Servers protected by Microsoft Monitoring Agent
+                  displayName: SQL, SQL servers, defender, machines, identify, Microsoft Monitoring Agent, MMA
+                  href: identify-sql-servers-protected-by-monitor-agent.md
                 - name: Verify SQL machine protection
                   displayName: SQL, SQL servers, defender, machines
                   href: verify-machine-protection.md

articles/defender-for-cloud/identify-sql-servers-protected-by-monitor-agent.md

@@ -0,0 +1,54 @@
+---
+title: Identify SQL Servers protected by Microsoft Monitoring Agent
+description: Learn how to identify SQL servers protected by the Microsoft Monitoring Agent (MMA) in your environment without having Azure Arc installed
+ms.topic: how-to
+ms.date: 02/26/2026
+ms.author: Elkrieger
+author: ElazarK
+# customer intent: As a user, I want to learn how to identify SQL servers that are protected by Microsoft Monitoring Agent (MMA) in my environment so that I can assess their security posture.
+---
+
+# Identify SQL Servers protected by Microsoft Monitoring Agent
+
+Microsoft Defender for Cloud's Defender for SQL Server on Machines plan provides database security to protect SQL Server instances hosted on Azure, Amazon Web Services (AWS), Google Cloud Platform (GCP), and on-premises machines. With the retirement of the Microsoft Monitoring Agent (MMA), on August 1,2024, the Defender for SQL Server on Machines plan requires meeting the [required perquisites](defender-for-sql-usage.md#prerequisites) and deploying Azure Arc on all non-Azure SQL Server instances.
+
+Once Azure Arc is deployed and following the [release on the updated agent](release-notes-archive.md#update-to-defender-for-sql-servers-on-machines-plan), your SQL Server instances will migrate automatically and seamlessly to the updated agent. To ensure your SQL servers are correctly protected, we recommend the [installation of Azure Arc](quickstart-onboard-machines.md#connect-on-premises-machines-by-using-azure-arc).
+
+> [!NOTE]
+>  This change might affect your pricing. For information regarding the plan pricing, review [Microsoft Defender for Cloud pricing](https://azure.microsoft.com/pricing/details/defender-for-cloud/).
+
+## Determine which SQL servers are protected by the legacy MMA
+
+You can identify SQL servers onboarded to the Defender for SQL Server on Machines plan with the legacy MMA in your environment without Azure Arc installed.
+
+1. Sign in to the [Azure portal](https://portal.azure.com).
+
+1. Search for and select **Azure Resource Graph Explorer**.
+
+1. Copy and paste the following query into the query window: 
+
+    ```kusto
+    securityresources 
+    | where type == "microsoft.security/assessments/subassessments" 
+    | extend assessmentKey = extract(@"(?i)providers/Microsoft.Security/assessments/([^/]*)", 1, id) 
+    | where assessmentKey == "f97aa83c-9b63-4f9a-99f6-b22c4398f936" 
+    | where tostring(properties.resourceDetails.source) == "OnPremiseSql" 
+    | extend lastScanTime = todatetime(properties.timeGenerated) 
+    | where lastScanTime > ago(30d) 
+    | extend machineName = tostring(properties.resourceDetails.machineName) 
+    | extend machineUuid = tostring(properties.resourceDetails.vmuuid) 
+    | distinct machineName, machineUuid
+    ```
+
+1. Select **Run query**.
+
+    :::image type="content" source="media/identify-sql-servers-protected-by-mma/run-query.png" alt-text="Screenshot that shows the pasted query and where to find the Run query button." lightbox="media/identify-sql-servers-protected-by-mma/run-query.png":::
+
+1. For any results returned, [connect hybrid machines with Azure Arc-enabled servers](/azure/azure-arc/servers/learn/quick-enable-hybrid-vm).
+
+## Related content
+
+- [Upcoming changes to Defender for SQL servers on Machines plan](release-notes-archive.md#update-to-defender-for-sql-servers-on-machines-plan)
+- [Enable Defender for SQL Servers on Machines](defender-for-sql-usage.md)
+- [Verify SQL machine protection](verify-machine-protection.md)
+- [Troubleshoot Defender for SQL on Machines configuration](troubleshoot-sql-machines-guide.md)