Great post very useful, thanks.
I'm facing an issue with the definition updates. The Defender doesn't recognize the files i think. I placed the mpam-fe.exe and renamed it to mpam-fex64.exe at the root of the boot.wim. No luck till now :-(
Do you have any further advice?
regards,
Oliver