Managing Intune Laptops - Updates & AV etc

[mdrabble]

** Realised posted in wrong area - feel free to move if needed **

 

Currently trialing intune laptop/USB C docks with some staff with a view to moving to all teaching staff in September.

 

So far so good.......

 

I have a couple of questions for those who are already managing intune devices.

 

Windows Updates - Use WuFB or Action1?  (Talking 100 laptops - so Action1 will be free)

AV - Windows Defender or Fortinet EMS? (We already use Fortigate, and FortiClient for Authentication, stick EMS on and use that for AV, Authentication, Compliance etc)

 

If EMS, on premise or cloud hosting?

 

I want to try and make sure I have as much cover in place as I can - especially if and when I want to go for Cyber Essentials etc....

 

Cheers

Edited March 27, 2025 by mdrabble

[mjhardisty]

Use Windows Update Rings in Intune for Security/Feature updates for Windows devices.

Action1 is useful for instant patching/deployment and fixing other vulunerabilities.

Are your uses on A3 or above licencing? If so, then use Defender for Endpoint.