Automatically launch Microsoft Defender for Endpoint during Android Enterprise device setup

What changed

After you configure the Defender for Endpoint connector, turn on Grant MTD role permissions , and assign the Defender app as required, you'll enable this experience from Endpoint security > Defender for Endpoint . Intune will open Defender during enrollment so users can complete its initial configuration as part of device setup.

Why it matters

The change can alter security posture, authentication, exposure or compatibility and therefore needs an owned validation path.

Known limitations

• Availability, prerequisites and rollout scope remain authoritative in the linked Microsoft documentation.

Now check

• Map the announced change to affected Intune workloads and supported platforms
• Pilot the exact profile, app or device action named by Microsoft
• Review policy, app, enrollment and support reports before rollout