I believe this is solved:
Our supplier has confirmed that we do not (can not) assign licenses to the servers - we just need to ensure that we have purchased the correct amount.

Answer from Nick Fuller on learn.microsoft.com
🌐
Microsoft Learn
learn.microsoft.com › en-us › defender-endpoint › microsoft-defender-endpoint
Microsoft Defender for Endpoint - Microsoft Defender for Endpoint | Microsoft Learn
... Microsoft Defender for Endpoint is an enterprise endpoint security platform designed to help enterprises prevent, detect, investigate, and respond to advanced threats on their endpoints.
🌐
Microsoft Learn
learn.microsoft.com › en-us › defender-endpoint › onboard-server
Onboard servers through Microsoft Defender for Endpoint's onboarding experience - Microsoft Defender for Endpoint | Microsoft Learn
If you're using Windows Server Update Services (WSUS) and/or Microsoft Configuration Manager, this new "Microsoft Defender for Endpoint update for EDR Sensor" is available under the category "Microsoft Defender for Endpoint." The previous implementation (before April 2022) of onboarding Windows Server 2016 and Windows Server 2012 R2 required the use of Microsoft Monitoring Agent (MMA). The modern, unified solution package makes it easier to onboard servers by removing dependencies and installation steps. It also provides a much expanded feature set.
People also ask

Which Microsoft Defender for Endpoint plan is supported in Defender for Servers?

Defender for Servers Plan 1 and Plan 2 provides the capabilities of Microsoft Defender for Endpoint Plan 2, including endpoint detection and response (EDR).

🌐
learn.microsoft.com
learn.microsoft.com › en-us › azure › defender-for-cloud › faq-defender-for-servers
Common questions - Defender for Servers - Microsoft Defender for ...
What are the licensing requirements for Microsoft Defender for Endpoint?

Licenses for Defender for Endpoint for Servers are included with Defender for Servers.

🌐
learn.microsoft.com
learn.microsoft.com › en-us › azure › defender-for-cloud › faq-defender-for-servers
Common questions - Defender for Servers - Microsoft Defender for ...
Can I get a discount if I already have a Microsoft Defender for Endpoint license?

If you already have a license for Microsoft Defender for Endpoint for Servers, you don't pay for that part of your Microsoft Defender for Servers Plan 1 (P1) or 2 (P2) license.

  1. To request your discount, in the Azure portal, select Support and Troubleshooting > Help + support. Select Create a support request and fill in the fields.

  2. In Additional details, enter details, tenant ID, the number of Defender for Endpoint licenses that were purchased, the expiration date, and all other required fields.

  3. Complete the process and select Create.

The discount becomes effective starting on the approval date. It isn't retroactive.

🌐
learn.microsoft.com
learn.microsoft.com › en-us › azure › defender-for-cloud › faq-defender-for-servers
Common questions - Defender for Servers - Microsoft Defender for ...
🌐
Microsoft
microsoft.com › en-us › security › business › endpoint-security › microsoft-defender-endpoint
Microsoft Defender for Endpoint | Microsoft Security
Stop cyberattacks and protect endpoints at speed and scale with industry-transforming AI that amplifies your security team’s strengths. Minimize vulnerabilities with a clear view of your cyberattack surface and adversaries, along with best practices for cyberthreat prevention. Help protect your IoT and multiplatform devices with a comprehensive, next-generation antivirus, detection, and response solution at the core of Microsoft Defender XDR.
🌐
Microsoft Learn
learn.microsoft.com › en-us › azure › defender-for-cloud › defender-for-servers-overview
Overview of Defender for Servers in Defender for Cloud - Microsoft Defender for Cloud | Microsoft Learn
This integration allows Defender for Servers to use the endpoint detection and response (EDR) capabilities of Defender for Endpoint. It also enables vulnerability scanning, software inventory, and premium features provided by Defender for Vulnerability Management.
🌐
Microsoft Learn
learn.microsoft.com › en-us › defender-endpoint › whats-new-in-microsoft-defender-endpoint
What's new in Microsoft Defender for Endpoint - Microsoft Defender for Endpoint | Microsoft Learn
Learn about the latest Microsoft Defender for Endpoint preview and generally available (GA) features, and security features in Windows 10 and Windows Server.
🌐
Microsoft Learn
learn.microsoft.com › en-us › defender-endpoint › supported-capabilities-by-platform
Supported Microsoft Defender for Endpoint capabilities by platform - Microsoft Defender for Endpoint | Microsoft Learn
For Windows 7, Windows 8.1, and Windows Server 2008 R2, use MMA for the EDR sensor and System Center Endpoint Protection (SCEP) for antivirus protection. For Windows 7 SP1 and Windows Server 2008 R2 SP1, you can also use Microsoft Defender endpoint security solution (preview) supplied by the Defender deployment tool (preview).
🌐
Microsoft Learn
learn.microsoft.com › en-us › azure › defender-for-cloud › plan-defender-for-servers-select-plan
Select a Defender for Servers plan - Microsoft Defender for Cloud | Microsoft Learn
Defender for Servers Plan 1 is entry-level, and focuses on the endpoint detection and response (EDR) capabilities provided by the Defender for Endpoint integration with Defender for Cloud. Defender for Servers Plan 2 provides the same features as Plan 1, and more:
Find elsewhere
🌐
Microsoft Learn
learn.microsoft.com › en-us › defender-endpoint › defender-endpoint-plan-1
Overview of Microsoft Defender for Endpoint Plan 1 - Microsoft Defender for Endpoint | Microsoft Learn
Defender for Endpoint includes certain manual response actions that can be taken on a device that is detected as potentially compromised or has suspicious content. You can also run response actions on files that are detected as threats.
🌐
Microsoft Learn
learn.microsoft.com › en-us › azure › defender-for-cloud › faq-defender-for-servers
Common questions - Defender for Servers - Microsoft Defender for Cloud | Microsoft Learn
If Defender for Servers Plan 2 is enabled on a workspace, you need to manually disable it in the workspace settings to stop data collection and turn off the feature. Learn how to disable the Defender for Servers plan. Defender for Servers Plan 1 and Plan 2 provides the capabilities of Microsoft Defender for Endpoint Plan 2, including endpoint detection and response (EDR).
🌐
Microsoft Learn
learn.microsoft.com › en-us › defender-endpoint › azure-server-integration
Integration with Microsoft Defender for Cloud - Microsoft Defender for Endpoint | Microsoft Learn
Windows servers monitored by Microsoft Defender for Cloud will also be available in Defender for Endpoint - Microsoft Defender for Cloud seamlessly connects to the Defender for Endpoint tenant, providing a single view across clients and servers.
🌐
Nerdio
getnerdio.com › home › glossary › microsoft defender for endpoint
Defender for Endpoint: Features and Comparisons
May 5, 2025 - Defender for Endpoint is available through several licensing options to suit different organizational needs. Plan 1 delivers foundational security features like next-generation antivirus and attack surface reduction.
Top answer
1 of 1
3

Hi @milo last , Defender for Endpoint and Defender for Servers both provide endpoint protection, but they have different features and capabilities. Defender for Endpoint is a cloud-based solution that provides advanced endpoint protection, including endpoint detection and response (EDR) capabilities. It requires an internet connection to function properly. On the other hand, Defender for Servers is an on-premises solution that provides endpoint protection for servers. It does not require an internet connection to function properly.

If your servers have no connectivity to the internet, Defender for Servers would be the better choice for you. It provides endpoint protection for servers without requiring an internet connection. However, if you have some servers that can connect using a proxy, you can use Defender for Endpoint for those servers.

It's important to note that if you choose Defender for Servers, you will not have access to the advanced EDR capabilities provided by Defender for Endpoint. However, Defender for Servers does provide basic endpoint protection for servers, including antivirus and antimalware protection.

If you have servers with no internet connectivity, Defender for Servers would be the better choice for you. If you have some servers that can connect using a proxy, you can use Defender for Endpoint for those servers.

Please let me know if you have any questions and I can help you further.

If this answer helps you please mark "Accept Answer" so other users can reference it.

Thank you,

James

🌐
Microsoft Learn
learn.microsoft.com › en-us › defender-endpoint
Microsoft Defender for Endpoint documentation - Microsoft Defender for Endpoint | Microsoft Learn
Learn about Microsoft Defender for Endpoint and maximize the built-in security capabilities to protect devices, detect malicious activity, and remediate threats# Required; article description that is displayed in search results.
🌐
Microsoft Learn
learn.microsoft.com › en-us › intune › configmgr › protect › deploy-use › defender-advanced-threat-protection
Microsoft Defender for Endpoint - Configuration Manager | Microsoft Learn
It is recommended to install the latest available SSU and LCU on the server. - The Microsoft Defender Antivirus feature must be enabled/installed and up to date. You can download and install the latest platform version using Windows Update. Alternatively, download the update package manually from the Microsoft Update Catalog or from MMPC. Go to the Microsoft Defender Security Center and sign in. Select Settings, then select Onboarding under the Endpoint heading.
🌐
Microsoft Learn
learn.microsoft.com › en-us › defender-endpoint › gov
Microsoft Defender for Endpoint for US Government customers - Microsoft Defender for Endpoint | Microsoft Learn
The following OS versions are supported when using Microsoft Defender for servers: If a proxy or firewall is blocking all traffic by default and allowing only specific domains through, add the domains listed in the downloadable sheet to the allowed domains list. ... You can use the streamlined connectivity feature to onboard new government devices to Defender for Endpoint, using a reduced URL set or static IP ranges.
🌐
Microsoft Learn
learn.microsoft.com › en-us › defender-endpoint › microsoft-defender-antivirus-on-windows-server
Microsoft Defender Antivirus on Windows Server - Microsoft Defender for Endpoint | Microsoft Learn
Beginning with platform version 4.18.2208.0 and later, if a server is onboarded to Defender for Endpoint, the "Turn off Windows Defender" setting in Group Policy no longer completely disables Windows Defender Antivirus on Windows Server 2012 R2 and later. Instead, it places Microsoft Defender Antivirus into passive mode. In addition, the tamper protection feature allows Microsoft Defender Antivirus to switch to active mode but not to passive mode.
🌐
Microsoft Learn
learn.microsoft.com › en-us › azure › defender-for-cloud › integration-defender-for-endpoint
Defender for Endpoint integration in Defender for Cloud - Microsoft Defender for Cloud | Microsoft Learn
Features include an inventory of known software, continuous vulnerability assessment and insights, secure score for devices, prioritized security recommendations, and vulnerability remediation.
🌐
Microsoft Learn
learn.microsoft.com › en-us › defender-endpoint › defender-deployment-tool-windows
Deploy Microsoft Defender endpoint security to Windows devices using the Defender deployment tool (preview) - Microsoft Defender for Endpoint | Microsoft Learn
If you wish to specifically configure a proxy to use for the Defender endpoint security services on the machine (static proxy), and not system-wide, see Configure your devices to connect to the Defender for Endpoint service using a proxy. On Windows Server 2016 and later, when the Defender Antivirus feature has been uninstalled or removed, you may encounter an error during the Enabling Feature 'Windows-Defender' step.