https://nathanmcnulty.com/tags/defender-for-endpoint/Recent content in Defender for Endpoint on Nathan McNultyHugoenTue, 13 Oct 2026 17:26:01 -0800https://nathanmcnulty.com/notes/defender/simplify-mde-for-macos-deployment/Sun, 10 Nov 2024 10:47:00 +0000https://nathanmcnulty.com/notes/defender/simplify-mde-for-macos-deployment/<p>Deploying Defender for Endpoint on macOS doesn&rsquo;t have to mean a separate profile for every permission.</p> <p>Microsoft provides a <a href="https://github.com/microsoft/mdatp-xplat/blob/master/macos/mobileconfig/combined/mdatp.mobileconfig" target="_blank" rel="noopener noreferrer">combined mdatp.mobileconfig</a>. The current file bundles system extensions, the network content filter, background services, notifications, Full Disk Access, and accessibility permissions.</p> <p>In Intune, create a <strong>macOS &gt; Templates &gt; Custom</strong> configuration profile, select <strong>Device channel</strong>, and upload the reviewed <code>.mobileconfig</code>. Pilot it before assigning it more broadly, and deploy the required permissions before the Defender app and onboarding package.</p>