Questions on configuring MDM on Mac Devices.

Hi Community,

One of our customer raised the below queries:

1. How do we ensure the kernel extension profile and settings are sent down to the device before the ATP app is deployed? https://techcommunity.microsoft.com/t5/microsoft-endpoint-manager-blog/microsoft-endpoint-manager-simplifies-deployment-of-microsoft/ba-p/1322995

This guide (https://docs.microsoft.com/en-us/mem/intune/configuration/kernel-extensions-overview-macos) describes the process of creating a profile to add antivirus scanning to kernel extensions, however this (https://techcommunity.microsoft.com/t5/intune-customer-success/support-tip-using-system-extensions-instead-of-kernel-extensions/ba-p/1191413) also mentions that kernel extensions are being replaced with system extensions.

2. Is there a documented procedure to remove Defender ATP and the Intune company app from a MAC? Or Is there any demo to do the correct MAC deployment procedure?

Any guidance would be of great help. Many thanks in advance!