Intune policy + Linux machines

Question

Intune policy + Linux machines

Vishnu Anand 285

I recently added my Ubuntu 24 LTS machine to Intune and applied a compliance policy — it worked well without any issues. After that, I created an antivirus policy and an EDR policy under the Endpoint Security section. However, the policy is not being assigned to the system. I’ve tried all assignment methods, including using a user group, device group, and the “All devices” option, but none of them worked.

Vishnu Anand 285 Reputation points

2025-10-27T08:33:20.2966667+00:00

Anyone can help with this issue?

1 answer

Your answer

Vishnu Anand 285 Reputation points

2025-10-27T08:33:20.2966667+00:00

Anyone can help with this issue?

Answer 1

Marius Vaičeliūnas 150

Hello,

Thank you for reaching out with your question.

Have you enrolled your machine to Microsoft Defender for Endpoint?

If not, please see this article on how to enroll devices to Microsoft Defender for Endpoint.

If you found this reply helpful, please consider upvoting or accepting it as the answer.

Best regards.

Vishnu Anand 285 Reputation points

2025-11-03T08:56:52.0733333+00:00

@marius vaiciunas , yes i already added the device to the Microsoft Defender for Endpoint using the Local Script**.**
Marius Vaičeliūnas 150 Reputation points

2025-11-04T08:26:26.3166667+00:00

Hello,

please confirm that your device shows Managed by "MDE" and MDE Enrollment status "Success" in Defender portal.
Vishnu Anand 285 Reputation points

2025-11-04T08:41:25.29+00:00

@Marius Vaičeliūnas, nope. the device shows Managed by Unknown. How can i fix this issue.
Marius Vaičeliūnas 150 Reputation points

2025-11-04T09:17:29.8066667+00:00
Hello,
as your device isn't managed by MDE, it won't sync any policies.

To enable MDE management, please follow these steps:

Open Intune portal and go to Endpoint security tab. Then open Microsoft Defender for Endpoint settings and make sure this setting is On.

Open Defender portal and go to System, then Settings, then Endpoints. Select Enforcement scope tab under Configuration management. Check if Use MDE to enforce security configuration settings from Intune is On. Then check if configuration management is enabled for Linux devices. And then check if Security settings management for Microsoft Defender for Cloud onboarded devices is also On.

Wait for the device to enroll with MDE, you should see this status in the device page. It can take some time to enroll, I suggest you to check after 24 hours.

After that, please perform policy sync in the same device page.

After about 10 minutes, verify that your device has managed configurations with tag [managed] and is managed by MDE by using command mdatp health.

Share via

Intune policy + Linux machines

1 answer

Your answer