Skip to content

Commit 05421b9

Browse files
committed
Update configure-device-discovery.md
1 parent 5608243 commit 05421b9

File tree

1 file changed

+13
-7
lines changed

1 file changed

+13
-7
lines changed

defender-endpoint/configure-device-discovery.md

Lines changed: 13 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -30,15 +30,16 @@ ms.date: 02/24/2025
3030

3131
Device discovery can be configured to be on standard or basic mode. Use the standard option to actively find devices in your network, which helps improve the discovery of endpoints and provide richer device classification.
3232

33-
You can customize the list of devices that are used to perform standard discovery. You can either enable standard discovery on all the onboarded devices that also support this capability (currently - Windows 10 or later and Windows Server 2019 or later devices only) or select a subset or subsets of your devices by specifying their device tags.
33+
You can customize the list of devices that are used to perform standard discovery. You can either enable standard discovery on all the onboarded devices that also support this capability (currently for devices running Windows 10 and later, or Windows Server 2019 and later). Or, you can select a subset of devices by specifying their device tags.
3434

3535
## Set up device discovery
3636

3737
To set up device discovery, take the following configuration steps in the [Microsoft Defender portal](https://security.microsoft.com):
3838

3939
Navigate to **Settings** > **Device discovery**
4040

41-
1. If you want to configure Basic as the discovery mode to use on your onboarded devices, select **Basic** and then select **Save**
41+
1. If you want to configure Basic as the discovery mode to use on your onboarded devices, select **Basic** and then select **Save**.
42+
4243
2. If you've selected to use Standard discovery, select which devices to use for active probing: all devices or on a subset by specifying their device tags, and then select **Save**
4344

4445
> [!NOTE]
@@ -76,16 +77,20 @@ You control where device discovery takes place. Monitored networks are where dev
7677
Choosing the initial discovery classification means applying the default system-made network monitor state. Selecting the default system-made network monitor state means that networks that were identified to be corporate, are monitored, and ones identified as non-corporate, are ignored automatically.
7778

7879
1. Select **Settings > Device discovery**.
80+
7981
2. Select **Monitored networks**.
82+
8083
3. View the list of networks.
84+
8185
4. Select the three dots next to the network name.
86+
8287
5. Choose whether you want to monitor, ignore, or use the initial discovery classification.
8388

84-
> [!WARNING]
85-
>
86-
> - Choosing to monitor a network that was not identified by Microsoft Defender for Endpoint as a corporate network can cause device discovery outside of your corporate network, and may therefore detect home or other non-corporate devices.
87-
> - Choosing to ignore a network will stop monitoring and discovering devices in that network. Devices that were already discovered won't be removed from the inventory, but will no longer be updated, and details will be retained until the data retention period of the Defender for Endpoint expires.
88-
> - Before choosing to monitor non-corporate networks, you must ensure you have permission to do so. <br>
89+
> [!WARNING]
90+
>
91+
> - Choosing to monitor a network that was not identified by Microsoft Defender for Endpoint as a corporate network can cause device discovery outside of your corporate network, and may therefore detect home or other non-corporate devices.
92+
> - Choosing to ignore a network will stop monitoring and discovering devices in that network. Devices that were already discovered won't be removed from the inventory, but will no longer be updated, and details will be retained until the data retention period of the Defender for Endpoint expires.
93+
> - Before choosing to monitor non-corporate networks, you must ensure you have permission to do so. <br>
8994
9095
6. Confirm that you want to make the change.
9196

@@ -118,4 +123,5 @@ DeviceInfo
118123

119124
- [Device discovery overview](device-discovery.md)
120125
- [Device discovery FAQs](device-discovery-faq.md)
126+
121127
[!INCLUDE [Microsoft Defender for Endpoint Tech Community](../includes/defender-mde-techcommunity.md)]

0 commit comments

Comments
 (0)