Blog Post

Microsoft Intune Blog
5 MIN READ

Microsoft Endpoint Manager simplifies deployment of Microsoft Defender ATP for macOS

Mayunk_Jain's avatar
Mayunk_Jain
Icon for Microsoft rankMicrosoft
Apr 22, 2020
Microsoft Endpoint Manager is excited to announce support for simplified deployment and configuration of Microsoft Defender Advanced Threat Protection for macOS. Microsoft Defender ATP helps organiza...
Updated Feb 10, 2023
Version 3.0
microsoft intune
giladke's avatar
giladke
Brass Contributor
Apr 23, 2020

Hi Mayunk_Jain,

 

As you described in your article, the script creates relevant custom configuration as shown https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/mac-install-with-intune#download-installation-and-onboarding-packages

  1. Cloud it be you forgot to include "MDATP_Microsoft_AutoUpdate.xml" in the script? or is this not needed anymore?
  2. As I understand "MDATP_WDAV_and_exclusion_settings_Preferences.xml" responsible for MDATP settings and exclusions, I didn't see this CSP in you script either, i'm guessing because it was replaced by the new https://docs.microsoft.com/en-us/mem/intune/protect/antivirus-microsoft-defender-settings-macos, but in the profile I couldn't find the following (are those not needed too or it means I still need to maintain this CSP):
    1. Potentially unwanted applications (PUA) are blocked
    2. Archive bombs (file with a high compression rate) are audited to Microsoft Defender ATP logs

thanks,

 

Gilad.