Automatically launch Microsoft Defender for Endpoint during Android Enterprise device setup

What changed

After you configure the Defender for Endpoint connector, turn on Grant MTD role permissions , and assign the Defender app as required, enable the experience from Endpoint security > Defender for Endpoint . Intune opens Defender during enrollment so users can complete its initial configuration as part of device setup.

Why it matters

Launching Defender during enrollment can improve protection readiness but adds connector, app-assignment and user-interaction dependencies to Android setup.

Known limitations

• Availability, prerequisites and rollout scope remain authoritative in the linked Microsoft documentation.

Now check

• Verify the Defender connector, Grant MTD role permissions and required app assignment
• Pilot corporate-owned Android enrollment through initial Defender configuration
• Validate setup completion, threat signals, compliance state and recovery from user interruption