MC687846 – (Updated) New Microsoft Defender Antivirus services on Windows Devices (archived)

cloudscout.one Icon

check before: 2023-11-21

Product:

Defender, Defender XDR, Microsoft 365 Defender, Purview Data Loss Prevention, Windows

Platform:

US Instances, Windows Desktop, World tenant

Status:

Change type:

Admin impact, New feature, Updated message, User impact

Links:

Details:

Summary:
Microsoft Defender Antivirus on Windows 10 and Windows 11 will be shipping with a new service called Microsoft Defender Core service. The rollout will occur in stages, starting with a preview in November 2023 and worldwide rollout in April 2024. To prepare, users need to update the Platform Update to the latest version and allow specific URLs. If using an Application Control application or running a 3rd party AV and/or EDR, add the Microsoft Defender Core Service process to the allowed list.

Details:
Updated July 5, 2024: We have updated the rollout timeline and content below. Thank you for your patience.
Microsoft Defender Antivirus on Windows 10 and Windows 11 will be shipping with a new service:
Microsoft Defender Core service.
[When this will happen:]

Preview: November '23 to Beta channel (Prerelease).
Worldwide: We will roll out to all rings (Current Channel (Preview), Current Channel (Staged) and Current Channel (Broad)) during late April 2024 (previously mid-April).
GCC Moderate, GCC High and DOD: We will roll out to all rings (Current Channel (Preview), Current Channel (Staged) and Current Channel (Broad)) during mid-July 2024 (previously late June).

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:

Created:
2023-11-07

updated:
2024-08-10

Task Type

XXXXXXX ... free basic plan only

Docu to Check

XXXXXXX ... free basic plan only

MS How does it affect me

XXXXXXX ... free basic plan only

MS Preperations

XXXXXXX ... free basic plan only

MS Urgency

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

Direct effects for Operations**

- Direct Impact on IT Operations
- Potential service interruptions during the rollout phase, especially if the Platform Update is not applied timely.
- Roles Impacted: IT Operations Team, System Administrators
- Increased workload for IT administrators to manage exceptions and configurations for third-party AV/EDR solutions.
- Roles Impacted: IT Security Team, IT Support Staff
- Need for monitoring and troubleshooting during the transition to ensure that the new service integrates smoothly with existing systems.
- Roles Impacted: IT Operations Team, Helpdesk Staff

- Direct Impact on IT Services
- Changes in endpoint security performance and stability may lead to temporary degradation of service quality during the rollout.
- Roles Impacted: Service Delivery Managers, IT Service Management Team
- Dependencies on existing security protocols and configurations may require adjustments, potentially affecting other security services.
- Roles Impacted: IT Security Team, Compliance Officers
- Integration with Microsoft 365 Defender and Purview Data Loss Prevention may necessitate additional configurations and testing.
- Roles Impacted: IT Security Team, Application Administrators

- Direct Impact on IT Users
- Users may experience disruptions or changes in their antivirus protection, leading to confusion or security concerns.
- Roles Impacted: End Users, Department Managers
- Training and communication will be required to inform users about the new service and any changes in their security experience.
- Roles Impacted: IT Training Team, Communication Officers
- Potential for increased support requests as users adapt to the new service and any associated changes in functionality.
- Roles Impacted: Helpdesk Staff, IT Support Team

References:
- Microsoft Defender Antivirus: [Microsoft Docs](https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/microsoft-defender-antivirus?view=o365-worldwide)
- Microsoft Security Blog: [Microsoft Security](https://www.microsoft.com/security/blog/)

Opportunities**

XXXXXXX ... free basic plan only

Potentional Risks**

XXXXXXX ... paid membership only

Data Protection**

XXXXXXX ... paid membership only

Hypothetical Work Council Statement**

XXXXXXX ... paid membership only

DPIA Draft**

XXXXXXX ... paid membership only

** AI generated content. This information is not reliable.

a free basic plan is required to see more details. Sign up here


A cloudsocut.one plan is required to see all the changed details. If you are already a customer, choose login.
If you are new to cloudscout.one please choose a plan.



change history

DatePropertyoldnew
2024-07-06MC Last Updated06/21/2024 19:58:212024-07-05T19:07:41Z
2024-07-06MC MessagesUpdated June 21, 2024: We have updated the rollout timeline and content below. Thank you for your patience.
Microsoft Defender Antivirus on Windows 10 and Windows 11 will be shipping with a new service:
Microsoft Defender Core service.
[When this will happen:]

Preview: November ‘23 to Beta channel (Prerelease).
Worldwide: We will roll out to all rings (Current Channel (Preview), Current Channel (Staged) and Current Channel (Broad)) during late April 2024 (previously mid-April).
GCC Moderate, GCC High and DOD: We will roll out to all rings (Current Channel (Preview), Current Channel (Staged) and Current Channel (Broad)) during late June 2024 (previously mid-June).
Updated July 5, 2024: We have updated the rollout timeline and content below. Thank you for your patience.
Microsoft Defender Antivirus on Windows 10 and Windows 11 will be shipping with a new service:
Microsoft Defender Core service.
[When this will happen:]

Preview: November ‘23 to Beta channel (Prerelease).
Worldwide: We will roll out to all rings (Current Channel (Preview), Current Channel (Staged) and Current Channel (Broad)) during late April 2024 (previously mid-April).
GCC Moderate, GCC High and DOD: We will roll out to all rings (Current Channel (Preview), Current Channel (Staged) and Current Channel (Broad)) during mid-July 2024 (previously late June).
2024-07-06MC End Time07/29/2024 10:00:002024-08-26T10:00:00Z
2024-06-22MC MessagesUpdated April 18, 2024: We have updated the rollout timeline and content below. Thank you for your patience.
Microsoft Defender Antivirus on Windows 10 and Windows 11 will be shipping with a new service:
Microsoft Defender Core service.
[When this will happen:]

Preview: Nov ‘23 to Beta channel (Prerelease).
Worldwide: We will roll out to all rings (Current Channel (Preview), Current Channel (Staged) and Current Channel (Broad)) during late April 2024 (previously mid-April).
GCC Moderate, GCC High and DOD: We will roll out to all rings (Current Channel (Preview), Current Channel (Staged) and Current Channel (Broad)) during mid-June 2024.
Updated June 21, 2024: We have updated the rollout timeline and content below. Thank you for your patience.
Microsoft Defender Antivirus on Windows 10 and Windows 11 will be shipping with a new service:
Microsoft Defender Core service.
[When this will happen:]

Preview: November ‘23 to Beta channel (Prerelease).
Worldwide: We will roll out to all rings (Current Channel (Preview), Current Channel (Staged) and Current Channel (Broad)) during late April 2024 (previously mid-April).
GCC Moderate, GCC High and DOD: We will roll out to all rings (Current Channel (Preview), Current Channel (Staged) and Current Channel (Broad)) during late June 2024 (previously mid-June).
2024-06-22MC Last Updated04/19/2024 00:37:042024-06-21T19:58:21Z
2024-04-19MC MessagesUpdated March 5, 2024: We have updated the rollout timeline and content below. Thank you for your patience.
Microsoft Defender Antivirus on Windows 10 and Windows 11 will be shipping with a new service:
Microsoft Defender Core service.
[When this will happen:]

Preview: Nov ‘23 to Beta channel (Prerelease).
Worldwide: We will roll out to all rings (Current Channel (Preview), Current Channel (Staged) and Current Channel (Broad)) during the week of April 15, 2024.
GCC Moderate, GCC High and DOD: We will roll out to all rings (Current Channel (Preview), Current Channel (Staged) and Current Channel (Broad)) during the week of June 10, 2024.
Updated April 18, 2024: We have updated the rollout timeline and content below. Thank you for your patience.
Microsoft Defender Antivirus on Windows 10 and Windows 11 will be shipping with a new service:
Microsoft Defender Core service.
[When this will happen:]

Preview: Nov ‘23 to Beta channel (Prerelease).
Worldwide: We will roll out to all rings (Current Channel (Preview), Current Channel (Staged) and Current Channel (Broad)) during late April 2024 (previously mid-April).
GCC Moderate, GCC High and DOD: We will roll out to all rings (Current Channel (Preview), Current Channel (Staged) and Current Channel (Broad)) during mid-June 2024.
2024-04-19MC Last Updated03/05/2024 22:44:212024-04-19T00:37:04Z
2024-03-06MC Last Updated01/13/2024 00:25:582024-03-05T22:44:21Z
2024-03-06MC MessagesUpdated January 9, 2024: We have updated the rollout timeline and content below. Thank you for your patience.
Microsoft Defender Antivirus on Windows 10 and Windows 11 will be shipping with a new service:
Microsoft Defender Core service.
[When this will happen:]

Preview: Nov ‘23 to Beta channel (Prerelease).
For Standard: We will roll out to all rings (Current Channel (Preview), Current Channel (Staged) and Current Channel (Broad)) during the week of March 11th, 2024.
For GCC Moderate, GCC High and DOD: We will roll out to all rings (Current Channel (Preview), Current Channel (Staged) and Current Channel (Broad)) during the week of April 8th, 2024.
Updated March 5, 2024: We have updated the rollout timeline and content below. Thank you for your patience.
Microsoft Defender Antivirus on Windows 10 and Windows 11 will be shipping with a new service:
Microsoft Defender Core service.
[When this will happen:]

Preview: Nov ‘23 to Beta channel (Prerelease).
Worldwide: We will roll out to all rings (Current Channel (Preview), Current Channel (Staged) and Current Channel (Broad)) during the week of April 15, 2024.
GCC Moderate, GCC High and DOD: We will roll out to all rings (Current Channel (Preview), Current Channel (Staged) and Current Channel (Broad)) during the week of June 10, 2024.
2024-03-06MC End Time05/13/2024 10:00:002024-07-29T10:00:00Z
2024-03-06MC SummaryMicrosoft Defender Antivirus on Windows 10 and Windows 11 will be shipping with a new service called Microsoft Defender Core service. The rollout will occur in stages, starting with a preview in November 2023 and worldwide rollout in April 2024. To prepare, users need to update the Platform Update to the latest version and allow specific URLs. If using an Application Control application or running a 3rd party AV and/or EDR, add the Microsoft Defender Core Service process to the allowed list.
2024-01-13MC MessagesUpdated January 9, 2024: We have updated the rollout timeline below. Thank you for your patience.
Microsoft Defender Antivirus on Windows 10 and Windows 11 will be shipping with two new services:

Microsoft Defender Core service.
Microsoft Data Loss Prevention Service
[When this will happen:]

Preview: Nov ‘23 to Beta channel (Prerelease).
Targeted Release: We will roll out to all rings Current Channel (Preview), Current Channel (Staged) and Current Channel (Broad) during the week of February 15th, 2024.
Standard: We will begin rolling out mid-January 2024 and expect to complete by early February 2024.
Updated January 9, 2024: We have updated the rollout timeline and content below. Thank you for your patience.
Microsoft Defender Antivirus on Windows 10 and Windows 11 will be shipping with a new service:
Microsoft Defender Core service.
[When this will happen:]

Preview: Nov ‘23 to Beta channel (Prerelease).
For Standard: We will roll out to all rings (Current Channel (Preview), Current Channel (Staged) and Current Channel (Broad)) during the week of March 11th, 2024.
For GCC Moderate, GCC High and DOD: We will roll out to all rings (Current Channel (Preview), Current Channel (Staged) and Current Channel (Broad)) during the week of April 8th, 2024.
2024-01-13MC How AffectTo enhance your endpoint security experience, we are shipping the Microsoft Defender Core service which will help with stability and performance of Microsoft Defender Antivirus.
In order to troubleshoot Endpoint DLP related issues, we are breaking apart the feature to its own service (service name).
To enhance your endpoint security experience, we are shipping the Microsoft Defender Core service which will help with stability and performance of Microsoft Defender Antivirus.
2024-01-13MC Last Updated01/09/2024 18:09:042024-01-13T00:25:58Z
2024-01-13MC End Time03/25/2024 09:00:002024-05-13T10:00:00Z
2024-01-13MC prepareUpdate the Platform Update to the latest version 4.18.23110.0 or newer
Allow the following URL’s:
*.events.data.microsoft.com
*.endpoint.security.microsoft.com
*.ecs.office.com
If using an Application Control application or running a 3rd party AV and/or EDR, add the following process to the allowed list.
Microsoft Defender Core Service – MdCoreSvc - MpDefenderCoreService.exe

Microsoft Data Loss Prevention Service – MDDlpSvc - MpDlpService.exe
Update the Platform Update to the latest version 4.18.23110.0 or newer
Allow the following URL’s:
Commercial:
*.events.data.microsoft.com
*.endpoint.security.microsoft.com
*.ecs.office.com
For US Gov, the ECS URL’s are:
GCC Mod: *.gccmod.ecs.office.com
GCC High: *.config.ecs.gov.teams.microsoft.us
DOD: *.config.ecs.dod.teams.microsoft.us
If using an Application Control application or running a 3rd party AV and/or EDR, add the following process to the allowed list.
Microsoft Defender Core Service – MdCoreSvc - MpDefenderCoreService.exe
2024-01-10MC Last Updated11/30/2023 20:33:382024-01-09T18:09:04Z
2024-01-10MC MessagesUpdated November 30, 2023: We have updated the rollout timeline below. Thank you for your patience.
Microsoft Defender Antivirus on Windows 10 and Windows 11 will be shipping with two new services:

Microsoft Defender Core service.
Microsoft Data Loss Prevention Service
[When this will happen:]

Preview: Nov ‘23 to Beta channel (Prerelease).
Targeted Release: We will roll out to all rings Current Channel (Preview), Current Channel (Staged) and Current Channel (Broad) during the week of January 15th, 2024.
Standard: We will begin rolling out mid-January 2024 and expect to complete by early February 2024.
Updated January 9, 2024: We have updated the rollout timeline below. Thank you for your patience.
Microsoft Defender Antivirus on Windows 10 and Windows 11 will be shipping with two new services:

Microsoft Defender Core service.
Microsoft Data Loss Prevention Service
[When this will happen:]

Preview: Nov ‘23 to Beta channel (Prerelease).
Targeted Release: We will roll out to all rings Current Channel (Preview), Current Channel (Staged) and Current Channel (Broad) during the week of February 15th, 2024.
Standard: We will begin rolling out mid-January 2024 and expect to complete by early February 2024.
2024-01-10MC End Time03/04/2024 09:00:002024-03-25T09:00:00Z
2023-12-01MC MessagesMicrosoft Defender Antivirus on Windows 10 and Windows 11 will be shipping with two new services:

Microsoft Defender Core service.
Microsoft Data Loss Prevention Service
[When this will happen:]

Preview: Nov ‘23 to Beta channel (Prerelease).
Standard: We will begin rolling out mid-January 2024 and expect to complete by early February 2024.
Updated November 30, 2023: We have updated the rollout timeline below. Thank you for your patience.
Microsoft Defender Antivirus on Windows 10 and Windows 11 will be shipping with two new services:

Microsoft Defender Core service.
Microsoft Data Loss Prevention Service
[When this will happen:]

Preview: Nov ‘23 to Beta channel (Prerelease).
Targeted Release: We will roll out to all rings Current Channel (Preview), Current Channel (Staged) and Current Channel (Broad) during the week of January 15th, 2024.
Standard: We will begin rolling out mid-January 2024 and expect to complete by early February 2024.
2023-12-01MC TitleNew Microsoft Defender Antivirus services on Windows Devices(Updated) New Microsoft Defender Antivirus services on Windows Devices
2023-12-01MC Last Updated11/07/2023 01:46:272023-11-30T20:33:38Z
2023-12-01MC MessageTagNamesNew feature, User impact, Admin impactUpdated message, New feature, User impact, Admin impact

Last updated 1 month ago

Share to MS Teams

Login to your account

Welcome Back, We Missed You!