Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Microsoft Defender for Endpoint on macOS uses endpoint security and network system extensions. For managed deployments, preapprove the extensions and deploy the network filter and Full Disk Access profiles so that Defender for Endpoint can operate without user approval prompts.
Before you start, review the Microsoft Defender for Endpoint on macOS prerequisites. Then use the current procedures for your management tool.
Configure profiles with Jamf Pro
Use the maintained Jamf Pro deployment procedures:
- Grant Full Disk Access to Microsoft Defender for Endpoint.
- Approve system extensions for Microsoft Defender for Endpoint.
- Configure the network extension.
Configure profiles with Microsoft Intune
Microsoft Intune is the recommended tool for configuring and distributing Defender for Endpoint features to devices. However, Intune is a separate product that isn't part of Defender for Endpoint, and it isn't included in all subscriptions. To use Intune, you need a subscription that includes it, or you can buy it separately as a standalone subscription or add-on. If you don't have Intune, you can use any of the other methods in this article. For more information, see Microsoft Intune licensing.
Note
The macOS Extensions template in Intune was deprecated in the August 2024 service release (2408). Policies created with the template continue to work, but you can't create new policies with it.
Don't use the deprecated Extensions template or the legacy combined sysext.xml profile. Use the following maintained procedures: