Updated January 9, 2024: We have updated the rollout timeline below. Thank you for your patience.
Microsoft Defender Antivirus on Windows 10 and Windows 11 will be shipping with two new services:
- Microsoft Defender Core service.
- Microsoft Data Loss Prevention Service
[When this will happen:]
Preview: Nov ‘23 to Beta channel (Prerelease).
Targeted Release: We will roll out to all rings Current Channel (Preview), Current Channel (Staged) and Current Channel (Broad) during the week of February 15th, 2024.
Standard: We will begin rolling out mid-January 2024 and expect to complete by early February 2024.
[How this will affect your organization:]
To enhance your endpoint security experience, we are shipping the Microsoft Defender Core service which will help with stability and performance of Microsoft Defender Antivirus.
In order to troubleshoot Endpoint DLP related issues, we are breaking apart the feature to its own service (service name).
[What you need to do to prepare:]
- Update the Platform Update to the latest version 4.18.23110.0 or newer
- Allow the following URL’s:
- *.events.data.microsoft.com
- *.endpoint.security.microsoft.com
- *.ecs.office.com
- If using an Application Control application or running a 3rd party AV and/or EDR, add the following process to the allowed list.
- Microsoft Defender Core Service – MdCoreSvc – MpDefenderCoreService.exe
- Microsoft Data Loss Prevention Service – MDDlpSvc – MpDlpService.exe
