Setup Defender for Endpoint

In the Microsoft 365 admin center, make sure at least 1 user is licensed for Defender for Endpoint (possibly via Business Premium).

https://admin.microsoft.com/#/users

Go to the Microsoft Defender onboarding page

https://security.microsoft.com/onboard

You may need to wait some period of time until Defender is provisioned in the background.

Add users as Security Administrators

Add recipients to receive email notifications for incidents and vulnerabilities

Then you will be given options for deployment.

For Windows devices that are not joined to Intune or Entra ID, download the Local Script onboarding package. This is a ZIP file containing a batch file. Extract the batch file, then right click on it and run as administrator.