macOS compliance policy - how to require antivirus?

Hi, We are a fully BYOD organization with a mix of Windows and macOS devices. One of our company policies is that every device use an antivirus application. Users may choose their own antiviru...

Intune

mobile device management (mdm)

Alo Press

Iron Contributor

Mar 04, 2021

Hello mikehimf

It does look like there is no Compliance policy for macOS to demand an Antivirus, even though there are configuration options to enable Defender but that does not replace the Compliance policy requirement for Conditional Access policies.

To require Antivirus for macOS you can leverage the Endpoint security > Antivirus > Crate macOS Policy to enforce Defender for Endpoint, see docs for available https://docs.microsoft.com/en-us/mem/intune/protect/antivirus-microsoft-defender-settings-macos.

Since there was no UserVoice request for this, I took it upon myself to add an Idea, requesting https://microsoftintune.uservoice.com/forums/291681-ideas/suggestions/42830946-add-defender-support-to-macos-compliance-policy so it would be possible to check machine state with Conditional Access policy, if it get enough votes.

mikehimf
Copper Contributor
Mar 04, 2021
Alo Press Thanks for confirming that, and submitting a UserVoice idea. I will look into Defender, that may be a good option.

Forum Discussion

macOS compliance policy - how to require antivirus?