u/AlertCut6

Hi,

I've got some AVD hosts that I want to install Defender on and remove Sophos. It's currently domain joined and GPO managed. It's entra hybrid joined. Its Windows 11 multi session.

I tried with a Dev host, which went well and I could see it in the portal. When I asked our security team to exclude various fslogix items it came to light that I needed to get the AVD registered in intune as that's where the policies for defender live. Upon doing this I started getting all my intune polices and apps, which was sub optimal.

Can I manage exclusions from the defender portal so I don't have to register the other devices in intune?