Q. What are enterprise management options for Windows Defender in Windows 10?
A. There are a number of ways to manage Windows Defender in Windows 10.
- Configuration Manager via its System Center Endpoint Protection component (although the SCEP client will not be deployed)
- Microsoft Intune
- Group Policy as documented at https://support.microsoft.com/en-us/kb/927367
For the actual location where Defender pulls its definition updates there are numerous options including Microsoft Update, WSUS and even file shares. All the options are documented along with their configuration at https://technet.microsoft.com/en-us/itpro/windows/keep-secure/configure-windows-defender-in-windows-10.