Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

What are the functional differences between Windows Defender and Windows Intune Endpoint Protection and SCCM Endpoint Protection, apart from methods of management, if any?

(I am referring to the Windows 8 version of Windows Defender, which I understand to include the functionality of Windows Security Essentials)

share|improve this question
1  
Pretty sure they are roughly identical, with some central management features bolted on the latter two...but have no real proof of that besides having used them. –  Grant Sep 2 '13 at 20:42

1 Answer 1

up vote 5 down vote accepted

Windows Defender pre-Windows 8 is a weak tool targeted at specific threats. It's not a full fledge AV, which is why Microsoft release Microsoft Security Essentials for home users. In Windows 8, Defender has MSE functionality rolled into it.

Endpoint for SCCM and Intune are functionally similar to MSE, except that it allows for more granular centralized management and reporting, which can be done either through Intune or SCCM. The SCCM and Intune versions are identical, except one is managed through a cloud-based Intune instance and one is managed through an on-prem SCCM instance.

So, basically, when talking about Windows 8 - all three are similar. It comes down to the management and reporting, or lack thereof.

share|improve this answer
    
So does that mean that the threat analysis is identical across all of them? –  paradroid Sep 2 '13 at 21:20
    
As far as I am aware, they all use the same definitions. Intune and SCCM's endpoint packages are absolutely identical. I believe Defender also follow that, but I'm not 100% sure. –  MDMarra Sep 2 '13 at 21:22

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.