You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: defender-endpoint/mac-resources.md
+32-32Lines changed: 32 additions & 32 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -74,16 +74,7 @@ If an error occurs during installation, the installer reports a general failure
74
74
75
75
For further troubleshooting installation issues, see [Troubleshoot installation issues for Microsoft Defender for Endpoint on macOS](mac-support-install.md).
76
76
77
-
## Uninstalling
78
-
79
-
> [!NOTE]
80
-
> Before uninstalling Microsoft Defender for Endpoint on macOS, offboard each device per [Offboard non-Windows devices](configure-endpoints-non-windows.md).
81
-
82
-
There are several ways to uninstall Microsoft Defender for Endpoint on macOS. Although centrally managed uninstallation is available on JAMF, it's not yet available for Microsoft Intune.
83
-
84
-
### Interactive uninstallation
85
-
86
-
- Open **Finder > Applications**. Right click on **Microsoft Defender for Endpoint**, and then select **Move to Trash**.
77
+
## Configuring from the command line
87
78
88
79
### Supported output types
89
80
@@ -93,28 +84,6 @@ Supports table and JSON format output types. For each command, there's a default
To uninstall Microsoft Defender for Endpoint on macOS using JAMF Pro upload the offboarding profile.
103
-
104
-
The offboarding profile should be uploaded without any modifications, and with Preference Domain name set to `com.microsoft.wdav.atp.offboarding`, as shown in the following image:
105
-
106
-
:::image type="content" source="/defender/media/defender-endpoint/jamf-pro-offboarding.png" alt-text="Screenshot of the JAMF offboarding screen" lightbox="/defender/media/defender-endpoint/jamf-pro-offboarding.png":::
107
-
108
-
109
-
> [!NOTE]
110
-
> If you have trouble uninstalling Defender for Endpoint on Mac, and you see in your reports an item for *Microsoft Defender Endpoint Security Extension*, follow these steps:
111
-
> 1. Reinstall the Microsoft Defender app.
112
-
> 2. Drag **Microsoft Defender.app** to **Trash**.
113
-
> 3. Run this command: `sudo /Library/Application Support/Microsoft/Defender/uninstall/install_helper execute --path '/Library/Application Support/Microsoft/Defender/uninstall/uninstall' --args --post-uninstall-hook`.
114
-
> 4. Restart the device.
115
-
116
-
## Configuring from the command line
117
-
118
87
Important tasks, such as controlling product settings and triggering on-demand scans, can be done by using the command line:
119
88
120
89
|Group|Scenario|Command|
@@ -201,6 +170,37 @@ To enable autocompletion in zsh:
201
170
202
171
`/Library/Application Support/Microsoft/Defender/quarantine/` contains the files quarantined by `mdatp`. The files are named after the threat trackingId. The current trackingIds are shown with `mdatp threat list`.
203
172
173
+
## Uninstalling
174
+
175
+
> [!NOTE]
176
+
> Before uninstalling Microsoft Defender for Endpoint on macOS, offboard each device per [Offboard non-Windows devices](configure-endpoints-non-windows.md).
177
+
178
+
There are several ways to uninstall Microsoft Defender for Endpoint on macOS. Although centrally managed uninstallation is available on JAMF, it's not yet available for Microsoft Intune.
179
+
180
+
### Interactive uninstallation
181
+
182
+
- Open **Finder > Applications**. Right click on **Microsoft Defender for Endpoint**, and then select **Move to Trash**.
To uninstall Microsoft Defender for Endpoint on macOS using JAMF Pro upload the offboarding profile.
191
+
192
+
The offboarding profile should be uploaded without any modifications, and with Preference Domain name set to `com.microsoft.wdav.atp.offboarding`, as shown in the following image:
193
+
194
+
:::image type="content" source="/defender/media/defender-endpoint/jamf-pro-offboarding.png" alt-text="Screenshot of the JAMF offboarding screen" lightbox="/defender/media/defender-endpoint/jamf-pro-offboarding.png":::
195
+
196
+
197
+
> [!NOTE]
198
+
> If you have trouble uninstalling Defender for Endpoint on Mac, and you see in your reports an item for *Microsoft Defender Endpoint Security Extension*, follow these steps:
199
+
> 1. Reinstall the Microsoft Defender app.
200
+
> 2. Drag **Microsoft Defender.app** to **Trash**.
201
+
> 3. Run this command: `sudo /Library/Application Support/Microsoft/Defender/uninstall/install_helper execute --path '/Library/Application Support/Microsoft/Defender/uninstall/uninstall' --args --post-uninstall-hook`.
202
+
> 4. Restart the device.
203
+
204
204
## Microsoft Defender for Endpoint portal information
0 commit comments