This walk through shows the two most common methods of onboarding Windows 10 devices to Defender for Endpoint, via Endpoint Manager and Intune policies as well as via a downloaded script. Using the policy option can be applied to all devices in your environment plus new ones you add automatically. The script option is a good for on demand needs.