Tl;DR: How do I manage on premise server defender policies with only defender plan 1 (deployed via Azure Arc)?

We have a project where the customer just wants Defender for Servers Plan 1 for their on-premise servers. The don't have any other 365/Azure product.

I've connected the machines via Azure Arc and enabled Defender Plan 1. Now I am trying to understand how to manage the security policies. I am used to using MDE to do so.It seem like there should be an option in the Defender portal under "Configuration Management" for configuring policies, but there is only "Dashboard" there.

Please don't tell me its GPO only... They have isolated AD domains in bunches of servers. I would have to deploy GPO in each domain...

​

EDIT:

I stumbled upon a client with Defender for Business and that DOES have configuration management from MDE!

This works (doc) but only for Defender for Business and not Plan 1.

​

​

https://preview.redd.it/ame3nvm98bbb1.png?width=308&format=png&auto=webp&s=6af1a69dd3ecf0bd37efe9f5d954442cd7f44ece