
Can I exclude unmanaged devices from the device inventory list? The configuration is available in the device discovery settings page. In this case, all other devices will be configured to run Basic discovery only.
DEVICE DISCOVERY TOOL WINDOWS 10
You can either enable Standard discovery on all the onboarded devices that also support this capability (currently Windows 10 or later and Windows Server 2019 or later devices only) or select a subset or subsets of your devices by specifying their device tags. You can customize the list of devices that are used to perform Standard discovery. Can I control which devices perform Standard discovery? Standard mode also leverages common discovery protocols that use multicast queries in the network to find even more devices, in addition to the ones that were observed using the passive method. If you choose to disable this mode, and select Basic discovery mode, you will likely only gain limited visibility of unmanaged endpoints in your network. This mode is highly recommended for building a reliable and coherent device inventory.

Only devices that were observed by the basic discovery mode will be actively probed in standard mode. In this mode endpoints onboarded to Microsoft Defender for Endpoint can actively probe observed devices in the network to enrich collected data (with negligible amount of network traffic). Note that SenseNDR.exe will still be running on the onboarded devices regardless discovery is turned off. However, you will lose visibility on unmanaged devices in your network. You have the option to turn off device discovery through the Advanced features page.

This data used to list unmanaged devices in your network. Onboarded endpoints will simply extract data from every network traffic that is seen by an onboarded device.

Onboarded endpoints passively collect events in the network and extract device information from them. This mode allows every Microsoft Defender for Endpoint onboarded device to collect network data and discover neighboring devices. Microsoft makes no warranties, express or implied, with respect to the information provided here.įind answers to frequently asked questions (FAQs) about device discovery. Some information relates to prereleased product which may be substantially modified before it's commercially released.
