Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources, documents or advisories need attention: 271/271 feeds/APIs · 464/464 docs · 8/9 advisories · checked 05:31 UTC Customize Public modeDiscuss ChangeIntel on Discord

Defender for Endpoint server onboarding

Timelines and exceptions · All guidance changes

Defender · Official Microsoft guidanceObserved changes retained

Retained observation

Source metadata changed; retained article content is unchanged.

Documentation metadata only

Read the current Microsoft source · Link to this observation · Compare any two versions

Observation details · observed 23 Oct 13:57 UTC
Observed by ChangeIntel
23 Oct 13:57 UTC
Source update metadata
20 Oct 22:38 UTC
First observed on this installation
8 Oct 23:13 UTC
Last successful check
today 02:41 UTC
Next check due
today 08:41 UTC

Observation time is not publication time, and a comparison does not establish an effective date. Full source bodies are not published; this page holds generated summaries, section headings and, as the page's license allows, Microsoft's changed wording. A documentation edit does not confirm feature availability in an environment.

Watch this page to review its changes in My radar.

Timeline

From the capture of 23 Oct 13:57 UTC
  1. Audit / monitorApril 2022 Now: Events or warnings only; nothing is blocked
  1. 8 years agofrom; or later
  2. 5 years agofrom; or later
  3. 4 years agomonth windowbeforeAudit / monitor

Requirements, exceptions and scope

Extracted automatically from Microsoft's wording. Confirm dates, conditions and whether they apply to you in the source before acting; a month or quarter is a window, not a day.

How this timeline changed

Changes between ChangeIntel's readings of the page, between commits of its source file where Microsoft publishes it, in Internet Archive copies of pages that keep no other history, and entries from Microsoft's own change log (dated as Microsoft dates them). Edits between readings that neither records are unknown.

  1. No longer on the page Run a detection test to verify onboardingseen by ChangeIntel
  2. Requirement added Verify onboardingseen by ChangeIntel
  3. No longer on the page Run a detection test to verify onboardingseen by ChangeIntel
  4. No longer on the page Run a detection test to verify onboardingseen by ChangeIntel
  5. Recommendation added Verify onboardingseen by ChangeIntel
  6. Recommendation added Verify onboardingseen by ChangeIntel
  7. Requirement added Associate non-Azure servers by using Direct onboardingseen by ChangeIntel
  8. Requirement added Server already reporting to Defender for Endpointin Choose a deployment methodseen by ChangeIntel
  9. Requirement added Deploy Defender for Endpoint manuallyseen by ChangeIntel
  10. Requirement added Onboard Windows Server 2016 and Windows Server 2012 R2seen by ChangeIntel
  11. Requirement added Prepare the rolloutseen by ChangeIntel
  12. Requirement added Prerequisitesseen by ChangeIntel
2 earlier changes
  1. Scope added Guidanceseen by ChangeIntel
  2. Scope added Prerequisitesseen by ChangeIntel
Observed history and review priority

Captured 23 Oct 13:57 UTC; extracted 23 Oct 13:57 UTC. Extractor: microsoft-1/9/d9863eb412f92fa5ec3a8ca32e2dd7cfe8095530f456ecb1866608d1166a435d.

Review priority. Previously extracted guidance is missing from a later capture · Extracted assertions require review · Publisher marks guidance tentative · Applicability or exceptions require review

0 date changes and 0 condition changes across 2 compared revisions. Suggested check interval: 6 hours.

Earlier unavailable versions and edits between checks are unknown. A missing statement requires review; it does not mean the policy was cancelled. Recovered historical statements are not original revision snapshots.

Retained observations · 4

Compact evidence remains available after full document bodies expire. Earlier extractions can have different vocabulary or capture limitations.

No related evidence found in this installation's recent collection. This does not establish that no announcement exists.

Retained observations

  • 23 Oct 13:57 UTC · shown above
  • 21 Oct 00:09 UTC

    32 new passages (about 450 words), 8 edited passages (142 words changed), 15 removed passages (about 410 words). The changed wording mentions dates and deadlines, defaults, prerequisites, permissions, supported platforms, network endpoints, settings and controls, licensing. Review the source to confirm the effect.

  • 12 Oct 23:53 UTC

    1 removed passage (14 words). The changed wording mentions network endpoints. Review the source to confirm the effect.

  • 8 Oct 23:13 UTC

    Baseline for retained history; no earlier retained text to compare.

What changed

First observed 18 Oct 2026

No field changes are shown for this selection.

Cite this recorded revision to keep the same title, summary, facts and links when the page changes.

A day selects the latest observation by the end of that UTC day; today's selection can change until midnight. History starts when this installation records it.

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 26 Oct 05:31 UTC · 271 of 271 readable · 269 fully read · documentation 464/464 current