Defender for Endpoint issues on Apple Silicon Macs (Issue: Action Needed)

[LeoJohn]

Hi y'all,

We are using Defender for Endpoint on our Intel Macs without a hitch (both corp & BYOD devices). Now we are trying to have BYOD Apple Silicon Macs deployed with Defender for Endpoint.

This gives us a strange issue: The Defender for Endpoint icon in the menubar shows a warning: Action Needed.

Protection works fine and everything looks okay. Only the Defender for Endpoint icon keeps showing a warning (Action Needed).

When we click on the warning, just the normal Defender for Endpoint interface is shown, without any issues or actions.

We can't find anything online and it's driving us crazy.

To be clear: This works fine on our Intel Macs.

Please some help!

We are using Jamf Pro.

[#2]

Yes, can confirm this. Tried with affected MacBooks. The checkmark is back on all MacBooks with the latest version.

[#3]

ATP 101.64.15 came out today and has resolved the issue.

[#4]

You are right, jumped too soon at our conclusion: Check mark disappeared after a little while. My bad.

[#5]

Thanks for sharing, thumbs up! This is such a bummer.
We are struggling with the constant Mac versus Windows battle and now Microsoft is dropping the ball and our Mac haters are on fire. Sigh.

[#6]

This is also fixed and working for us. After the update to 101.64.15, the checkmark is present again, even after reboots. Thanks for the fix !

[#7]

Yes, for us also. Finally!!

[#8]

@pmonfette-ns Good day make sure to follow this article and primarily look at step# 7. You have to grant full access to sshd-keygen-wrapper, Microsoft Defender ATP & Microsoft Security Defender extensions. 

Finally you have to run this Sudo bash -x MicrosoftDefenderATPOnboardingMacOs.sh. 

I am confident your issue will be solved. 

https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/mac-install-manually?view...