azureblog.co.uk
← cd ~/licences
// licences · sku

Microsoft_Defender_for_Endpoint_F2Microsoft Defender for Endpoint F2

Microsoft_Defender_for_Endpoint_F2 is the SKU part number Microsoft uses for Microsoft Defender for Endpoint F2. You'll see it in Graph, PowerShell, licence reports and group-based licensing errors.

Product nameMicrosoft Defender for Endpoint F2
String ID (SkuPartNumber)Microsoft_Defender_for_Endpoint_F2
GUID (SkuId)e430a580-c37b-4d16-adba-d881d7cd0364
Service plans1

Service plans included (1)

Service planNameID
WINDEFATPMicrosoft Defender for Endpoint871d91ec-ec1a-452b-a83f-bd76c7d770ef

Is it in your tenant?

powershell3 lines
Connect-MgGraph -Scopes "Organization.Read.All"
Get-MgSubscribedSku | Where-Object SkuPartNumber -eq "Microsoft_Defender_for_Endpoint_F2" |
    Select-Object SkuPartNumber, ConsumedUnits, @{ n = "Purchased"; e = { $_.PrepaidUnits.Enabled } }

Assign it to a user

For more than a handful of people, use group-based licensing instead. The user needs a usage location set first.

powershell3 lines
Connect-MgGraph -Scopes "User.ReadWrite.All"
Set-MgUserLicense -UserId "jane.doe@contoso.com" `
    -AddLicenses @{ SkuId = "e430a580-c37b-4d16-adba-d881d7cd0364" } -RemoveLicenses @()

Who has it?

powershell4 lines
Connect-MgGraph -Scopes "User.Read.All"
Get-MgUser -Filter "assignedLicenses/any(x:x/skuId eq e430a580-c37b-4d16-adba-d881d7cd0364)" `
    -ConsistencyLevel eventual -CountVariable n -All |
    Select-Object DisplayName, UserPrincipalName

Similar licences

These share the most service plans with Microsoft_Defender_for_Endpoint_F2.

  • WIN_DEF_ATP Microsoft Defender for Endpoint · 50% overlap
  • MDATP_Server Microsoft Defender for Endpoint Server · 50% overlap
  • MDATP_XPLAT Microsoft Defender for Endpoint P2_XPLAT · 33% overlap
  • WINE5_GCC_COMPAT Windows 10/11 Enterprise E5 Commercial (GCC Compatible) · 33% overlap

Search all 620 SKUs →

Sources