Can Microsoft Defender for Endpoint Plan 1 or 2 Onboard Windows Server?
Question details
The user wants to know if Windows Server systems can be onboarded to Microsoft Defender for Endpoint Plan 1 or Plan 2 using local scripts and be centrally managed.

- Product
- Microsoft Defender for Endpoint
- Device & OS
- Windows Server
- Scenario
- Determining licensing applicability and onboarding support for Windows Server using Defender for Endpoint plans.
- Observed behavior
- Organizations need clarity on whether standard Plan 1 or Plan 2 covers Windows Servers and if local onboarding scripts are officially supported.
Verify your current Microsoft Defender licensing plan (Plan 1, Plan 2, or Defender for Servers) and ensure you have administrative access to the Microsoft 365 Defender portal.
Check Licensing and Onboard via the Defender Portal
Determine the correct licensing for servers and use the Microsoft 365 Defender portal to generate a local onboarding script for Windows Server.
Typically, Microsoft Defender for Endpoint Plan 1 and Plan 2 are licensed per user for client devices. To centrally manage and protect Windows Server environments, organizations generally need to use Microsoft Defender for Servers (via Microsoft Defender for Cloud) or acquire a specific Defender for Endpoint Server license. Once licensed, you can use local scripts to onboard your servers.
Log in to security.microsoft.com using an account with Global Administrator or Security Administrator permissions.
In the left-hand navigation menu, scroll down to 'Settings', click on 'Endpoints', and then select 'Onboarding' under the Device management section.
From the 'Select operating system to start onboarding process' dropdown list, choose your specific Windows Server version (e.g., Windows Server 2019/2022).
Under 'Deployment method', select 'Local Script' from the dropdown and click 'Download package' to get the script for onboarding your Windows Server.

Seek Official Guidance on Microsoft Q&A
If you encounter specific script errors or have complex licensing questions, consult the Microsoft Q&A community as recommended by Microsoft Support.
Streamline Your Workflow with WPS Office
While securing your Windows Servers requires advanced tools like Microsoft Defender, maintaining daily productivity shouldn't require complex or expensive setups. WPS Office provides a free, lightweight, and incredibly powerful alternative to Microsoft Office. With a familiar interface and seamless compatibility with Microsoft document formats, your team can migrate effortlessly and boost productivity without additional overhead.
- 1. Download the Installer: Visit the official WPS Office website and click the download button to get the free installer.
- 2. Install WPS Office: Run the downloaded executable file and follow the straightforward on-screen instructions to install the suite.
- 3. Open Your Documents: Launch WPS Office and instantly open, edit, and save your existing Microsoft Office files without any formatting issues.

Frequently Asked Questions
Can I use Microsoft Defender for Endpoint Plan 1 for Windows Server?
Generally, Defender for Endpoint Plan 1 and Plan 2 are licensed per user and intended for client devices (like Windows 10/11). To protect Windows Servers, organizations usually need to license them through Microsoft Defender for Servers (integrated via Microsoft Defender for Cloud) or a standalone Defender for Endpoint Server license.
Is local script onboarding supported for Windows Server in Defender for Endpoint?
Yes, local onboarding scripts are supported for Windows Server. You can download the specific onboarding package for your server OS directly from the Settings > Endpoints > Onboarding section in the Microsoft 365 Defender portal.
Where should I ask advanced questions about Microsoft Defender licensing?
For detailed inquiries about licensing, centralized management, and specific deployment scripts for Windows Server, the official recommendation is to post your questions on the Microsoft Q&A platform using the appropriate Defender or Windows Server tags.




