Skip to content

mdb-setup-configuration.md

Latest commit

 

History

History
118 lines (77 loc) · 9.74 KB

mdb-setup-configuration.md

File metadata and controls

118 lines (77 loc) · 9.74 KB
title Set up and configure Microsoft Defender for Business
description See how to set up your Defender for Business cybersecurity solution. Onboard devices, review your policies, and edit your settings as needed.
search.appverid MET150
author chrisda
ms.author chrisda
manager bagol
audience Admin
ms.topic overview
ms.service defender-business
ms.localizationpriority medium
ms.date 09/11/2025
ms.reviewer efratka, nehabha
f1.keywords NOCSH
ms.collection
SMB
m365-security
m365solution-mdb-setup
highpri
tier1

Set up and configure Microsoft Defender for Business

This article describes the overall setup process for Defender for Business.

:::image type="content" source="media/mdb-setup-overview.png" alt-text="Overview of the setup process for Microsoft Defender for Business.":::

The process includes:

  1. Getting Defender for Business.
  2. Adding users and assigning licenses.
  3. Assigning security roles and permissions for your security team.
  4. Setting up email notifications for your security team.
  5. Onboarding devices so they're protected as soon as possible.
  6. Setting up and reviewing your security policies and settings.

Setup options

When you're ready to set up and configure Defender for Business, you can choose from several options:

  • Use the setup wizard to grant access to your security team, set up email notifications for your security team, onboard your company's Windows devices, and apply default security settings to those devices; or
  • Work through the setup process manually, step by step, and complete the setup steps yourself.

Note

Using the setup wizard is optional. If you choose not to use the wizard, or if the wizard is closed before your setup process is complete, you can complete the setup and configuration process on your own.

Setup wizard

  1. Get Defender for Business. Start a trial or paid subscription today. You can choose from the standalone version of Defender for Business, or get it as part of Microsoft 365 Business Premium. See Get Microsoft Defender for Business. And, if you're planning to onboard servers, see How to get Microsoft Defender for Business servers.

    In the Microsoft Defender portal (https://security.microsoft.com), in the navigation pane, select Assets > Devices. If Defender for Business isn't provisioned yet, that process begins now.

  2. Add users and assign Defender for Business licenses. Do this task before you run the setup wizard. See Add users and assign licenses in Microsoft Defender for Business.

    While you're adding users, make sure to create a list of your security team's names and email addresses. This list comes in handy while you're using the setup wizard. To view a list of users, in the Microsoft 365 admin center (https://admin.microsoft.com), go to Users > Active users.

  3. In the Microsoft Defender portal (https://security.microsoft.com), in the navigation pane, select Assets > Devices. You should see the setup wizard home screen, as shown in the following image:

    :::image type="content" source="media/mdb-wizard-start.png" alt-text="Screenshot of wizard home screen to set up Defender for Business." lightbox="media/mdb-wizard-start.png":::

    Select Get started to begin using the wizard.

  4. Assign user permissions. In this first step of the setup wizard, you grant your security team access to the Microsoft Defender portal (https://security.microsoft.com). This portal is where you and your security team manage your security capabilities, view alerts, and take any needed actions on detected threats. Portal access is granted through roles that imply certain permissions. Learn more about roles and permissions.

    In Defender for Business, members of your security team can be assigned one of the following three roles:

    • Security Administrator: A security administrator can view and edit security settings, and take action when threats are detected.
    • Security Reader: A security reader can view information in reports, but can't change any security settings.

  5. Set up email notifications. In this step of the setup wizard, you can set up email notifications for your security team using the list you created in step 2.

    When an alert is generated or a new vulnerability is discovered, your security team is notified, even if they're away from their desk. Learn more about email notifications.

  6. Onboard and configure Windows devices. In this step of the setup wizard, you can onboard Windows devices to Defender for Business. Onboarding devices right away helps to protect those devices from day one.

    This step applies to Windows devices only. You can onboard other devices later. For more information, see Onboard devices to Microsoft Defender for Business.

    [!NOTE] If your organization already has devices enrolled in Microsoft Intune, Defender for Business prompts you to continue using Intune, or switch to the simplified configuration process in the Microsoft Defender portal. For more information, see Choose where to manage security policies and devices.

    Defender for Business also offers automatic onboarding for Windows devices enrolled in Intune. Automatic onboarding is a simplified way to onboard Windows devices to Defender for Business. We recommend selecting the "all devices enrolled" option so that as Windows devices are enrolled in Intune, they're onboarded to Defender for Business automatically.

  7. Configure your security policies. Defender for Business includes default security policies for next-generation protection and firewall protection that can be applied to your company's devices. These default policies use recommended settings and are designed to provide strong protection for your devices. You can start with your default policies and add policies later. For more information, see Set up, review, and edit your security policies and settings.

  8. Select your next step. After the setup wizard is complete, you're prompted to choose a next step. For example, you can onboard devices, view your security dashboard, or view your security policies.

Manual setup

  1. Get Defender for Business. Start a trial or paid subscription today. You can choose from the standalone version of Defender for Business, or get it as part of Microsoft 365 Business Premium. For more information, see Get Microsoft Defender for Business. And, if you're planning to onboard servers, see How to get Microsoft Defender for Business servers.

  2. Add users and assign licenses. Assign a license for Defender for Business (or Microsoft 365 Business Premium) to each member of your organization to protect their devices. Make sure multifactor authentication is enabled for all users. For more information, see Add users and assign licenses in Microsoft Defender for Business.

  3. Assign roles and permissions to your security team. People on your security team need certain permissions to perform tasks such as reviewing detected threats & remediation actions, viewing & editing policies, onboarding devices, and using reports. You can grant these permissions through roles. For more information, see Assign roles and permissions.

  4. Set up email notifications for your security team. As alerts are generated, or new vulnerabilities are discovered, people on your security team can be notified automatically, via email messages. For more information, see Set up email notifications.

  5. Onboard devices to Defender for Business. The sooner you get your devices onboarded to Defender for Business, the sooner they're protected. You can onboard devices in the Microsoft Defender portal. Or, if your organization is already using Microsoft Intune, you can use it to enroll devices. For more information, see Onboard devices to Defender for Business.

  6. Set up and review your security policies and settings. Some security policies and settings are preconfigured with default settings in Defender for Business. Other policies, such as web content filtering and attack surface reduction rules, must be set up. For more information, see Configure your security settings and policies.

Important

If you have Microsoft 365 Business Premium, you have more capabilities to set up and configure. For more information, see What is Microsoft Defender for Business?.

Next steps

After reading this article, proceed to:

  1. Get Microsoft Defender for Business and Microsoft Defender for Business servers.
  2. Add users and assign licenses in Microsoft Defender for Business.

After you set up and configure Defender for Business, your next steps are to: