Controlled Configuration for Defender: deciding which channel actually owns your antivirus settings
New in preview: Intune-delivered Defender settings can now override Group Policy, Configuration Manager and local scripts. Useful, and not something to switch on tenant-wide.
