Threat Type settings with actions to take.

Exclusion Merge to restrict local users from adding their own exclusions.Some of the things we would like to configure is the following: The configuration profile is basically a XML file containing all your configuration settings for Defender ATP. This is part of the on-boarding package and is required for MDATP to work.If you want to enforce update ring or change behavior this must be configured. To update MDATP on macOS this program is used.Microsoft AutoUpdate (MAU) Configuration (optional).We need to white-list Defender ATP and Autoupdate for displaying notifications in UI on macOS Catalina.

On macOS Catalina we need to allow MDATP to have full access to all files on the machine with a specific configuration.This is where we decide how MDATP is behaving on your devices like enabling real-time protection.I recommend the following configurations to be deployed before deploying the Defender ATP application to our machines: To make MDATP work as we want it to we need to have some additional settings in addition to the ones in the on-boarding package.

Required configuration for MDATP to work on macOS Catalina But before we go into the details of this let us have a look of what else is needed. We have kext.xml which is for configuring kernel extensions on your macOS devices, and the WindowsDefenderATPOnboarding.xml that contains your tenant on-boarding information. Delete the jamf folder as we are using Intune to do this. In this folder you find a folder for Jamf and a folder for Intune. You will now get a file called WindowsDefenderATPOnboardingPackage.zip in your Downloads folder.

Microsoft defender for mac download