What are the functional differences between Windows Defender and Windows Intune Endpoint Protection and SCCM Endpoint Protection, apart from methods of management, if any?

(I am referring to the Windows 8 version of Windows Defender, which I understand to include the functionality of Windows Security Essentials)

  • 1
    Pretty sure they are roughly identical, with some central management features bolted on the latter two...but have no real proof of that besides having used them. – Grant Sep 2 '13 at 20:42

Windows Defender pre-Windows 8 is a weak tool targeted at specific threats. It's not a full fledge AV, which is why Microsoft release Microsoft Security Essentials for home users. In Windows 8, Defender has MSE functionality rolled into it.

Endpoint for SCCM and Intune are functionally similar to MSE, except that it allows for more granular centralized management and reporting, which can be done either through Intune or SCCM. The SCCM and Intune versions are identical, except one is managed through a cloud-based Intune instance and one is managed through an on-prem SCCM instance.

So, basically, when talking about Windows 8 - all three are similar. It comes down to the management and reporting, or lack thereof.

  • So does that mean that the threat analysis is identical across all of them? – paradroid Sep 2 '13 at 21:20
  • 1
    As far as I am aware, they all use the same definitions. Intune and SCCM's endpoint packages are absolutely identical. I believe Defender also follow that, but I'm not 100% sure. – MDMarra Sep 2 '13 at 21:22

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.