This week, Microsoft launched Home windows 11 LTSC 2024 and detailed all the new features it good points in comparison with Home windows 10. The corporate additionally printed an in depth publish explaining the Home windows 11 24H2 improve info, compatibility, and options for managed enterprise and office PCs. Moreover, the tech large reminded system directors how function updates may be made “optional” with its recently released policy change.
Other than these, Microsoft has now printed a steering publish associated to a Defender for Endpoint onboarding subject on the newest function replace. The corporate says the issue is current even when an endpoint detection and response (EDR) coverage is utilized by way of Intune.
Microsoft has described two eventualities by which this occurs on Home windows 11 Professional PCs (It’s price noting that the Home windows 11 House SKU doesn’t help Defender for Endpoint cloud safety). It explains:
A consumer buys a brand new machine that has the House SKU. This SKU doesn’t help Defender for Endpoint. Then the consumer upgrades to Professional utilizing a Professional product key. This course of, known as “transmog,” doesn’t set up Defender for Endpoint, which is by design. The Defender for Endpoint agent will not be accurately enrolled within the Defender for Endpoint service, and the machine will not be protected.
A consumer buys a brand new machine that has the Professional SKU, and the OEM didn’t set up the required function.
Subsequently, even when a consumer buys a brand new Home windows 11 24H2 Professional PC that the OEM had pre-upgraded from House, the issue pops up. Fortunately, Microsoft says that Intune shows an error message when it’s unable to efficiently apply the EDR coverage.
A workaround has additionally been printed by the corporate, which includes working the next Deployment Picture Servicing and Administration (DISM) elevated command earlier than the onboarding course of:
Workaround
Use the Deployment Picture Servicing and Administration (DISM) command-line instrument to put in the Home windows Sense Consumer from an elevated command immediate. See the command beneath.
DISM /on-line /Add-Functionality /CapabilityName:Microsoft.Home windows.Sense.Consumer~~~~
You possibly can view the minimal system necessities for Defender for Endpoint here on Microsoft’s official web site. The main points of this subject have been printed on this help web page below KB5043950.