Windows Defender 365 in Citrix PVS provisioned windows 2019 VDA's hosting an application

[Raymond Zawislak]

I am working on a large CVA Site. ~3000 PVS provisioned VM's, all Servers in the environment infrastructure and VDA's are Windows 2019, Hypervisor is AHV, CVA 1912 CU6

Is there a good guide out their for setting up Microsoft's ATP for provisioned VDA's hosting apps not desktops. I have reviewed the following articles:

https://techcommunity.microsoft.com/t5/microsoft-defender-for-endpoint/onboarding-and-servicing-non-persistent-vdi-machines-with/ba-p/1360721

Onboarding and servicing non-persistent VDI machines with Microsoft Defender ATP - Microsoft Community Hub

These are related and I am fairly sure I will need to use some of the scripts discussed. but it does not seem to fit the PVS case for VDAs supporting Virtual applications.

an Article or suggestions are very welcome.

[Jeff Riechers]

For non-persistent environments I usually will configure Defender non-persistent offloading, and not register them to the management console.

https://www.jeffriechers.com/wiki/vdi-defender-offloading/

If you are registering them with the console, then the desktop considerations work fine for published apps as well.