added include

Author: denisebmsft

defender-endpoint/deployment-strategy.md

@@ -32,6 +32,8 @@ We understand that every enterprise environment is unique, so we've provided sev
 
 :::image type="content" source="/defender/media/defender-endpoint/onboarding-architecture-2.png" alt-text="The deployment flow":::
 
+[!INCLUDE [side-by-side-scenarios](includes/side-by-side-scenarios.md)]
+
 ## Step 1: Identify your architecture
 
 Depending on your environment, some tools are better suited for certain architectures. Use the following table to decide which Defender for Endpoint architecture best suits your organization.

defender-endpoint/onboard-configure.md

@@ -32,6 +32,8 @@ ms.date: 09/30/2024
 
 In this step, you're ready to configure Microsoft Defender for Endpoint capabilities.
 
+[!INCLUDE [side-by-side-scenarios](includes/side-by-side-scenarios.md)]
+
 ## Configure capabilities
 
 In many cases, organizations have existing endpoint security products in place. The bare minimum being an antivirus solution, but in some cases, an organization might have existing endpoint detection and response solution.

defender-endpoint/onboarding.md

@@ -33,6 +33,8 @@ ms.date: 05/08/2025
 
 > Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://go.microsoft.com/fwlink/p/?linkid=2225630)
 
+[!INCLUDE [side-by-side-scenarios](includes/side-by-side-scenarios.md)]
+
 ## Onboard devices using any of the supported management tools
 
 The deployment tool you use influences how you onboard endpoints to the service. Refer to your selected [deployment method](deployment-strategy.md#step-2-select-your-deployment-method).

defender-endpoint/production-deployment.md

@@ -40,8 +40,7 @@ In this deployment scenario, you're guided through the steps on:
 - Tenant configuration
 - Network configuration
 
-> [!IMPORTANT]
-> Microsoft recommends that you use roles with the fewest permissions. This helps improve security for your organization. Global Administrator is a highly privileged role that should be limited to emergency scenarios when you can't use an existing role.
+[!INCLUDE [side-by-side-scenarios](includes/side-by-side-scenarios.md)]
 
 For the purpose of guiding you through a typical deployment, this scenario will only cover the use of Microsoft Configuration Manager. Defender for Endpoint supports the use of other onboarding tools but we won't cover those scenarios in the deployment guide. For more information, see [Identify Defender for Endpoint architecture and deployment method](deployment-strategy.md).
 

defender-endpoint/switch-to-mde-overview.md

@@ -35,6 +35,8 @@ If you're ready to move from a non-Microsoft endpoint protection solution to [Mi
 
 When you migrate to Defender for Endpoint, you begin with your non-Microsoft antivirus/antimalware protection in active mode. Then, you configure Microsoft Defender Antivirus in passive mode, and configure Defender for Endpoint features. Then, you onboard your organization's devices, and verify that everything is working correctly. Finally, you remove the non-Microsoft solution from your devices.
 
+[!INCLUDE [side-by-side-scenarios](includes/side-by-side-scenarios.md)]
+
 ## The migration process
 
 :::image type="content" source="media/phase-diagrams/migration-phases.png" alt-text="The MDE migration process" lightbox="media/phase-diagrams/migration-phases.png":::

defender-endpoint/switch-to-mde-phase-1.md

@@ -37,11 +37,13 @@ search.appverid: met150
 
 This migration phase includes the following steps:
 
-1. [Get and deploy updates across your organization's devices](#step-1-get-and-deploy-updates-across-your-organizations-devices).
-2. [Get Microsoft Defender for Endpoint Plan 1 or Plan 2](#step-2-get-microsoft-defender-for-endpoint-plan-1-or-plan-2).
-3. [Grant access to the Microsoft Defender portal](#step-3-grant-access-to-the-microsoft-365-defender-portal).
-4. [Review more information about device proxy and internet connectivity settings](#step-4-view-information-about-device-proxy-and-internet-connectivity-settings).
-5. [Capture performance baseline data from the endpoint](#step-5-capture-performance-baseline-data-from-the-endpoint) 
+1. Get and deploy updates across your organization's devices.
+2. Get Microsoft Defender for Endpoint Plan 1 or Plan 2.
+3. Grant access to the Microsoft Defender portal.
+4. Review more information about device proxy and internet connectivity settings.
+5. Capture performance baseline data from the endpoint. 
+
+[!INCLUDE [side-by-side-scenarios](includes/side-by-side-scenarios.md)]
 
 ## Step 1: Get and deploy updates across your organization's devices
 

defender-endpoint/switch-to-mde-phase-3.md

@@ -35,12 +35,14 @@ search.appverid: met150
 
 **Welcome to Phase 3 of [migrating to Defender for Endpoint](switch-to-mde-overview.md#the-migration-process)**. This migration phase includes the following steps:
 
-1. [Onboard devices to Defender for Endpoint](#step-1-onboard-devices-to-microsoft-defender-for-endpoint).
-2. [Run a detection test](#step-2-run-a-detection-test).
-3. [Confirm that Microsoft Defender Antivirus is in passive mode on your endpoints](#step-3-confirm-that-microsoft-defender-antivirus-is-in-passive-mode-on-your-endpoints).
-4. [Get updates for Microsoft Defender Antivirus](#step-4-get-updates-for-microsoft-defender-antivirus).
-5. [Uninstall your non-Microsoft solution](#step-5-uninstall-your-non-microsoft-solution).
-6. [Make sure Defender for Endpoint is working correctly](#step-6-make-sure-defender-for-endpoint-is-working-correctly).
+1. Onboard devices to Defender for Endpoint.
+2. Run a detection test.
+3. Confirm that Microsoft Defender Antivirus is in passive mode on your endpoints.
+4. Get updates for Microsoft Defender Antivirus.
+5. Uninstall your non-Microsoft solution.
+6. Make sure Defender for Endpoint is working correctly.
+
+[!INCLUDE [side-by-side-scenarios](includes/side-by-side-scenarios.md)]
 
 ## Step 1: Onboard devices to Microsoft Defender for Endpoint