Note: If you're planning to run a third-party AV for macOS, set passiveMode to true. Microsoft Defender for Endpoint configuration settings WindowsDefenderATPOnboarding_MDATP_Īpprove System Extension for Microsoft Defender for Endpoint The following table summarizes the steps you would need to take to deploy and manage Microsoft Defender for Endpoint on Macs, via Microsoft Intune. Microsoft Defender for Endpoint no longer supports macOS Catalina (10.15) as Apple ended support for Catalina (10.15) in December 2022. A successful deployment requires the completion of all of the following steps:īefore you get started, see the main Microsoft Defender for Endpoint on macOS page for a description of prerequisites and system requirements for the current software version.

This topic describes how to deploy Microsoft Defender for Endpoint on macOS through Microsoft Intune.

Microsoft Defender for Endpoint on macOS.

Set the Maximum number of retries if the script fails to 3.Deploy Microsoft Defender for Endpoint on macOS with Microsoft Intune.

This enforces the script to run in the system context. Set Run script as “ signed-in user” to No.Login to Intune portal and navigate to Devices > macOS > Shell Scripts.Download the Intune Company Portal Installation Script.This option will always install the current version of Company Portal for macOS but lacks the option of reporting app installation. The company portal will be downloaded and installed using the macOS Shell Scripts feature. However, for now, I will walk you through the app deployment on supervised devices and would recommend deploying Company Portal using shell script. Install Company Portal for macOS by using a macOS Shell Script.Install Company Portal for macOS as a macOS LOB app.Instruct users to download and install Company Portal.There are multiple ways of pushing the Company Portal to macOS devices:

Navigate to Devices > macOS > Shell Scripts, upload the two scripts below, and assign them to the same device group to which the MDE policies were assigned. It is not completed yet…There are still two more configurations remaining: Keep default values, click Next and assign it to the Device group.

Defender for endpoint macos