How to: Connect Windows 10 machines to the Windows Defender ATP service (Updated for Windows 10 Creators update!) RRS feed

  • General discussion

  • Before you begin:

    Note that Enterprise, Education or Pro editions of Windows are required for Windows Defender ATP.

    Windows Defender ATP Preview and Trial customers can now enable the service to monitor Windows 10 machines in one of two ways:

    Option 1 - Windows 10 Anniversary update or Creators update

    Using machines running Windows 10 Enterprise, Professional or Education edition with anniversary release build (1607) or creators release build (1704). To check which build your device is running select "Start"->"Settings"->"System"->"About" and look under the version field.

    Note that creators update build contains additional WDATP features not available in anniversary build such as response capabilities to isolate a machine and block a file as well as sensor enhancements. For this reason, we strongly recommend to use WDATP with creator update builds.

    Option 2 - Windows 10 preview builds with new beta features

    (1) Ensure you are signed up for the Windows Insider program
    (2) Open Insider program download instructions, under "select edition" select  "Windows 10 Insider preview Enterprise" with build 15063 or greater. Use the provided download links to obtain installation media
    (3) Install Windows 10 Insider Preview build on a device that has been previously activated with Windows 10 or with a Windows 10 product key. 

    If you have a Pro Windows 10 machine, make sure to upgrade to a Pro preview build. If you have an Enterprise Windows 10 machine, make sure to upgrade to an Enterprise preview build. Upgrading across editions may result in an ask to provide a valid commercial Windows 10 license key that corresponds to the edition you are upgrading to.

    (4) From the upgraded machines, go to Start->Settings-> Update & Security -> Windows Insider Program. Make sure you are set to receive Insider preview builds and that your "Insider Level" is set to "Fast". Go back to Start->Settings->Update & Security and check for updates.

    Once you have a qualified machine (either option 1 or 2 above)

    -  Log into the Windows Defender ATP portal, open “Endpoint Onboarding” from the navigation pane, select “Local Script” from the drop down menu, and click the “Download Package” button.

    - Extract and run “WindowsATPOnboardingScript.cmd” in an elevated command prompt (“run as administrator”)

    The machine light up in the Windows Defender ATP portal within minutes.

    Ensuring the machine is connected to an external power supply can help shorten the wait time.

    Monday, May 23, 2016 9:19 AM

All replies

  • I have downloaded and installed the Windows 10 Ent Insider ISO, after some interface issues (lost access to the Start button) did a full reset and now have a stable install. The problem is it won't activate, how do I get a product key? Thanks Rusty
    Tuesday, May 24, 2016 6:41 PM
  • I've updated the note above to reflect the answer to this situation.

    In short, when upgrading across editions of Windows, you will be asked to provide a corresponding license key to prove you have rights to use this edition.

    Since both Enterprise and Pro editions are supported by the preview, I recommend to start and upgrade within one edition (e.g. Windows 10 Pro-> Windows 10 Pro insider preview or Windows 10 Enterprise -> Windows 10 Enterprise insider preview).

    Wednesday, May 25, 2016 8:38 PM