Forum Discussion

djolenole's avatar
djolenole
Brass Contributor
Nov 04, 2025

Defender for Endpoint - macOS scan takes 1 second

Hello, 

We use Defender for Endpoint on macOS deployed by Mosyle MDM. 

However, we noticed when user run quick or full scan that action takes 1 second and that is it - 0 files scanned.

This used to work before; I happen to have a screenshot: 

 

 

 

Now, if I run scan from command line, again the same: 

 

 

We use config profiles from here: https://github.com/microsoft/mdatp-xplat/tree/master/macos/mobileconfig/profiles 

mdatp health output:

 

 

Did anyone have this issue? 

 

Thanks!

 

 

 

 

 

1 Reply

  • djolenole's avatar
    djolenole
    Brass Contributor
    Nov 07, 2025

     

    Small update, these are individual cases, it doesn't affect everyone. For example, screenshots from another machine where scanning works(Sequoia 15.7 and Defender is up to date) mdatp health command shows that Defender has full disk access, however in GUI everything is turned off, which is weird.

     

     

     

     

    2 affected devices were Sequoia 15.7. updated to Tahoe 26.1 - still does not work.

Resources