---
title: Intune Onboarding for MDE (Windows)
description: Quick guide on assigning groups to Intune policies related to Windows Intune MDE onboarding.
---

[Skip to content](https://knowledge.sittadel.com/deploy-intune-edr-and-av-policy#main-content)

[![Sittadel-Logo-Icon-Slim-Large-Square-Green-Transparent copy](https://knowledge.sittadel.com/hs-fs/hubfs/Sittadel-Logo-Icon-Slim-Large-Square-Green-Transparent%20copy.png?width=55&height=55&name=Sittadel-Logo-Icon-Slim-Large-Square-Green-Transparent%20copy.png)](https://sittadel.com/)

- [About Sittadel](https://sittadel.com/about/)
- [Capabilities](https://sittadel.com/capabilities/microsoft-office365-azure-security/)
  
  Show submenu for Capabilities

    - [Microsoft Security Architecture](https://sittadel.com/capabilities/microsoft-office365-azure-security/)
    - [Detection & Response](https://sittadel.com/capabilities/managed-detection-and-response/)
    - [Employee Training](https://sittadel.com/capabilities/security-awareness-training/)
    - [Security Risk Advisors](https://sittadel.com/capabilities/virtual-information-security-officer/)
- [Resources](https://sittadel.com/resources/)
- [Knowledge Base](https://knowledge.sittadel.com/)

Open main navigation

Close main navigation

- [About Sittadel](https://sittadel.com/about/)
- [Capabilities](https://sittadel.com/capabilities/microsoft-office365-azure-security/)
  
  Show submenu for Capabilities

    - [Microsoft Security Architecture](https://sittadel.com/capabilities/microsoft-office365-azure-security/)
    - [Detection & Response](https://sittadel.com/capabilities/managed-detection-and-response/)
    - [Employee Training](https://sittadel.com/capabilities/security-awareness-training/)
    - [Security Risk Advisors](https://sittadel.com/capabilities/virtual-information-security-officer/)
- [Resources](https://sittadel.com/resources/)
- [Knowledge Base](https://knowledge.sittadel.com/)
- [Get Sittadel](https://sittadel.com/start/)

[Get Sittadel](https://sittadel.com/start/)

 Find answers to your security questions.

- There are no suggestions because the search field is empty.

1. [Sittadel Knowledge Base](https://knowledge.sittadel.com/?hsLang=en)
2. [Deploy MDE](https://knowledge.sittadel.com/deploy-mde?hsLang=en)
3. [Intune Deployment](https://knowledge.sittadel.com/deploy-mde?hsLang=en#intune-deployment)

# Intune Onboarding for MDE (Windows)

## A guide on assigning groups to Intune policies related to Windows Intune MDE onboarding, ensuring necessary security functionality for the MDE Agent are distributed to desired device groups.

### **Intune Policy Deployment**

1. Navigate to the [Antivirus – Intune](https://intune.microsoft.com/#view/Microsoft_Intune_Workflows/SecurityManagementMenu/~/antivirus) portal, here we will want to locate and select the **Sittadel – Defender AV Policy** to begin the **policy assignment process.**  
   **![](https://knowledge.sittadel.com/hs-fs/hubfs/image-png-Aug-26-2024-05-29-02-4435-PM.png?width=670&height=354&name=image-png-Aug-26-2024-05-29-02-4435-PM.png)**
2. Once opened we will want to scroll down to the **Assignments** section of the **policy** and select **Edit** to create a **group enforcement scope for the policy.**  
   **![](https://knowledge.sittadel.com/hs-fs/hubfs/image-png-Aug-26-2024-05-30-11-9818-PM.png?width=670&height=354&name=image-png-Aug-26-2024-05-30-11-9818-PM.png)**
3. Selecting **Edit** will display the **Basics** section for the selected policy, from this section we will want to select the **Assignments** section.  
   **![](https://knowledge.sittadel.com/hs-fs/hubfs/image-png-Aug-26-2024-05-30-38-3865-PM.png?width=670&height=354&name=image-png-Aug-26-2024-05-30-38-3865-PM.png)**
4. From the **Assignments** section, utilize the **Search** field to supply **the name for the desired groups that you wish to have MDE enforcement on.** **The selected group(s) should generate in the list below.** Select **Next** to continue to the **Review** section for **assignment finalization.**  
   **![](https://knowledge.sittadel.com/hs-fs/hubfs/image-png-Aug-26-2024-05-32-13-3936-PM.png?width=670&height=353&name=image-png-Aug-26-2024-05-32-13-3936-PM.png)**
5. From the **Review** section, we will want to select the **Assignments** dropdown to **verify that the previous assignment(s)** have been made correctly. If the **desired group(s) is generating**, we will select **Save** to continue to the **EDR policy** assignment.  
   **![](https://knowledge.sittadel.com/hs-fs/hubfs/image-png-Aug-26-2024-05-33-54-8310-PM.png?width=670&height=353&name=image-png-Aug-26-2024-05-33-54-8310-PM.png)**
6. Navigate to the [Endpoint Detection and Response – Intune](https://intune.microsoft.com/#view/Microsoft_Intune_Workflows/SecurityManagementMenu/~/edr) portal, here we will want to locate and select the **Sittadel – Defender EDR Policy** to begin the **policy assignment process.**  
   **![](https://knowledge.sittadel.com/hs-fs/hubfs/image-png-Aug-26-2024-05-34-59-0587-PM.png?width=670&height=353&name=image-png-Aug-26-2024-05-34-59-0587-PM.png)**
7. Once opened we will want to scroll down to the **Assignments** section of the **policy** and select **Edit** to create a **group enforcement scope for the policy.**  
   **![](https://knowledge.sittadel.com/hs-fs/hubfs/image-png-Aug-26-2024-05-36-19-6906-PM.png?width=670&height=353&name=image-png-Aug-26-2024-05-36-19-6906-PM.png)**
8. Selecting **Edit** will display the **Basics** section for the selected policy, from this section we will want to select the **Assignments** section.  
   **![](https://knowledge.sittadel.com/hs-fs/hubfs/image-png-Aug-26-2024-05-37-08-6331-PM.png?width=670&height=353&name=image-png-Aug-26-2024-05-37-08-6331-PM.png)**
9. From the **Assignments** section, utilize the **Search** field to supply **the name for the desired groups that you wish to have MDE enforcement on.** **The selected group(s) should generate in the list below.** Select **Next** to continue to the **Review** section for **assignment finalization.**  
   **![](https://knowledge.sittadel.com/hs-fs/hubfs/image-png-Aug-26-2024-05-39-02-4340-PM.png?width=670&height=353&name=image-png-Aug-26-2024-05-39-02-4340-PM.png)**
10. From the **Review** section, we will want to select the **Assignments** dropdown to **verify that the previous assignment(s)** have been made correctly. If the **desired group(s) is generating**, we will select **Save** to finalize the **Intune policy assignment** process.  
    **![](https://knowledge.sittadel.com/hs-fs/hubfs/image-png-Aug-26-2024-05-39-28-4467-PM.png?width=670&height=352&name=image-png-Aug-26-2024-05-39-28-4467-PM.png)**

### Need Assistance?

Reach out to your Customer Success Manager to discuss how a Sittadel cybersecurity analyst can assist in managing these tasks for you. New to our services? [Inquire](https://sittadel.com/start/) about arranging a consultation to explore optimizing your Azure environment for painless management.

- [UserOps](https://knowledge.sittadel.com/userops?hsLang=en#main-content)

    - [Access & Permissions](https://knowledge.sittadel.com/userops?hsLang=en#access-permissions)
    - [Account](https://knowledge.sittadel.com/userops?hsLang=en#account)
    - [Devices](https://knowledge.sittadel.com/userops?hsLang=en#devices)
    - [Document Sharing](https://knowledge.sittadel.com/userops?hsLang=en#document-sharing)
    - [Email](https://knowledge.sittadel.com/userops?hsLang=en#email)
    - [Requests](https://knowledge.sittadel.com/userops?hsLang=en#requests)
    - [Troubleshoot](https://knowledge.sittadel.com/userops?hsLang=en#troubleshoot)
- [TechOps](https://knowledge.sittadel.com/techops?hsLang=en#main-content)

    - [Tenant Foundations](https://knowledge.sittadel.com/techops?hsLang=en#tenant-foundations)
    - [Collaboration Security](https://knowledge.sittadel.com/techops?hsLang=en#collaboration-security)
    - [Email Security](https://knowledge.sittadel.com/techops?hsLang=en#email-security)
    - [Device Security](https://knowledge.sittadel.com/techops?hsLang=en#device-security)
    - [Identity Security](https://knowledge.sittadel.com/techops?hsLang=en#identity-security)
- [SecOps](https://knowledge.sittadel.com/secops?hsLang=en#main-content)

    - [Email SOC](https://knowledge.sittadel.com/secops?hsLang=en#email-soc)
    - [Identity SOC](https://knowledge.sittadel.com/secops?hsLang=en#identity-soc)
    - [Tenant SOC](https://knowledge.sittadel.com/secops?hsLang=en#tenant-soc)
    - [Device SOC](https://knowledge.sittadel.com/secops?hsLang=en#device-soc)
- [Deploy Intune](https://knowledge.sittadel.com/deploy-intune?hsLang=en)
- [Deploy MDE](https://knowledge.sittadel.com/deploy-mde?hsLang=en#main-content)

    - [Overview](https://knowledge.sittadel.com/deploy-mde?hsLang=en#overview)
    - [Intune Deployment](https://knowledge.sittadel.com/deploy-mde?hsLang=en#intune-deployment)
    - [Hands-On Deployment](https://knowledge.sittadel.com/deploy-mde?hsLang=en#hands-on-deployment)
    - [Azure Arc Deployment](https://knowledge.sittadel.com/deploy-mde?hsLang=en#azure-arc-deployment)
    - [RMM Tool Deployment](https://knowledge.sittadel.com/deploy-mde?hsLang=en#rmm-tool-deployment)
    - [MECM/SCCM Deployment](https://knowledge.sittadel.com/deploy-mde?hsLang=en#mecm-sccm-deployment)
    - [GPO Deployment](https://knowledge.sittadel.com/deploy-mde?hsLang=en#gpo-deployment)
- [Deploy Services](https://knowledge.sittadel.com/deploy-services?hsLang=en#main-content)

    - [Cloud Enclave](https://knowledge.sittadel.com/deploy-services?hsLang=en#cloud-enclave)
- [Azure Portals](https://knowledge.sittadel.com/azure-portals?hsLang=en#main-content)

    - [Entra ID](https://knowledge.sittadel.com/azure-portals?hsLang=en#entra-id)
    - [Intune](https://knowledge.sittadel.com/azure-portals?hsLang=en#intune)
    - [Defender](https://knowledge.sittadel.com/azure-portals?hsLang=en#defender)
    - [Purview](https://knowledge.sittadel.com/azure-portals?hsLang=en#purview)
    - [SharePoint Admin Center](https://knowledge.sittadel.com/azure-portals?hsLang=en#sharepoint-admin-center)
    - [Teams Admin Center](https://knowledge.sittadel.com/azure-portals?hsLang=en#teams-admin-center)
    - [Admin Center](https://knowledge.sittadel.com/azure-portals?hsLang=en#admin-center)
    - [Exchange Admin Center](https://knowledge.sittadel.com/azure-portals?hsLang=en#exchange-admin-center)

[![](https://knowledge.sittadel.com/hs-fs/hubfs/Sittadel_LogoH_Color_BlackText.png?width=186&height=55&name=Sittadel_LogoH_Color_BlackText.png)](https://Sittadel.com)

Security for Humans.

Copyright © 2026, Sittadel

<https://www.linkedin.com/company/sittadel> <https://outlook.office365.com/book/StartSittadelcom@sittadel.com/?ismsaljsauthenabled=true> <https://outlook.office365.com/book/StartSittadelcom@sittadel.com/?ismsaljsauthenabled=true>