Powershell scripts/MDE Integration/Enable MDE Unified solution/Enable-UnifiedMDE.ps1 (44 lines of code) (raw):
write-host '#####################################################################################################' -ForegroundColor green
write-host '# #' -ForegroundColor green
write-host '# This script will enable MDE Unified solution integration for Windows Server 2012 R2 and 2016 #' -ForegroundColor green
write-host '# machines with Microsoft Defender for Cloud. #' -ForegroundColor green
write-host '# Please enter your Tenant ID. The script will then configure all subscriptions in this tenant. #' -ForegroundColor green
write-host '# #' -ForegroundColor green
write-host '# You will be asked if you want to enable MDE integration on all subscriptions, or only those #' -ForegroundColor green
write-host '# that don`t have MDE Unified solution integration enabled. #' -ForegroundColor green
write-host '# #' -ForegroundColor green
write-host '#####################################################################################################' -ForegroundColor green
write-host ''
$tenantId = Read-Host "Enter your Tenant ID"
$enableMDE = Read-Host "Do you want to enable MDE integration on all subscriptions (y/n)?"
while ("y","n" -notcontains $enableMDE) {
$enableMDE = Read-Host "Do you want to enable MDE integration on all subscriptions? Please only enter (y/n)."
}
$subscriptions = Get-AzSubscription -TenantId $tenantId
Foreach ($subscription in $subscriptions){
$context = Set-AzContext -Subscription $subscription.id
Write-host -nonewline "Testing subscription "
Write-host -nonewline $context.subscription.Name -ForegroundColor Green
Write-host -nonewline " with subscription ID "
Write-host -nonewline $context.subscription.Id -ForegroundColor Green
Write-host "."
$test0 = Get-AzSecuritySetting -SettingName WDATP
If ($test0.enabled) {
$test1 = Get-AzSecuritySetting -SettingName WDATP_UNIFIED_SOLUTION
If (!$test1.enabled){
Set-AzSecuritySetting -SettingName WDATP_UNIFIED_SOLUTION `
-SettingKind DataExportSettings `
-Enabled $true > $null
Write-Host "Enabled MDE Unified Solution integration on subscription" $context.subscription.id
}
}
elseif ($enableMDE -eq "y"){
Set-AzSecuritySetting -SettingName WDATP `
-SettingKind DataExportSettings `
-Enabled $true > $null
Write-Host "Enabled MDE integration for all machines on subscription" $context.subscription.id
}
else {
continue
}
}