Protect managed education endpoints with Microsoft Defender for Endpoint Plan 1, a cloud-based endpoint security service focused on preventative controls. The Plan 1 tier combines malware protection with attack surface reduction capabilities that help administrators apply protection policies across managed devices. It suits schools, colleges, and universities that need centralized security policy administration for their endpoint population. DB1D70659C24 corresponds to the education edition of Microsoft Defender for Endpoint Plan 1. The service operates through Microsoft security management tooling, where administrators can configure endpoint protection settings and review security-related information. Attack surface reduction policies provide controls for reducing exposure to common endpoint attack techniques, while malware protection addresses malicious software encountered on protected devices. Within the Defender for Endpoint family, Plan 1 is the preventative protection tier. Its emphasis is on endpoint protection policy and attack surface controls rather than the advanced investigation, threat-hunting, and automated remediation functions associated with higher service tiers. Choose this education subscription when the required scope is managed endpoint protection with centralized policy controls, and verify the required tenant, user, device, quantity, and term requirements before assignment.