Defender Exploit Guard Network Protection Management Tools

A variety of tools can deploy and manage Windows Defender Exploit Guard Network Protection (Network Protection) on devices running Windows 10. Some tools may work best for a specific task. For example, Group Policy may do an excellent job of configuring Network Protection, but it is not a tool for monitoring or reporting. Configuration Manager has the most capabilities and longest support life cycles.

Some tools, such as Intune or Configuration Manager, may require additional licensing.

The Future Support and Life Cycle score is Directions on Microsoft’s estimate of future Microsoft investment in the tools listed.

Tool	Deploy	Configure	Manage	Monitor and Report	Future Support and Life Cycle
Group Policy	N/A	Yes	Yes	No	█ █ █
Intune	N/A	Yes	Yes	Yes	█ █ █ █
PowerShell (Scripting)