Devices running Defender For Endpoint via the Microsoft Monitoring Agent MMA

DeviceTvmSecureConfigurationAssessment
| where ConfigurationId =~ "scid-2030"
| where IsApplicable == 1
| where IsCompliant == 0
(No Ratings Yet)