Skip to content

Commit 860129f

Browse files
committed
Learn Editor: Update mac-resources.md
1 parent 299a2a7 commit 860129f

File tree

1 file changed

+32
-32
lines changed

1 file changed

+32
-32
lines changed

defender-endpoint/mac-resources.md

Lines changed: 32 additions & 32 deletions
Original file line numberDiff line numberDiff line change
@@ -74,16 +74,7 @@ If an error occurs during installation, the installer reports a general failure
7474

7575
For further troubleshooting installation issues, see [Troubleshoot installation issues for Microsoft Defender for Endpoint on macOS](mac-support-install.md).
7676

77-
## Uninstalling
78-
79-
> [!NOTE]
80-
> Before uninstalling Microsoft Defender for Endpoint on macOS, offboard each device per [Offboard non-Windows devices](configure-endpoints-non-windows.md).
81-
82-
There are several ways to uninstall Microsoft Defender for Endpoint on macOS. Although centrally managed uninstallation is available on JAMF, it's not yet available for Microsoft Intune.
83-
84-
### Interactive uninstallation
85-
86-
- Open **Finder > Applications**. Right click on **Microsoft Defender for Endpoint**, and then select **Move to Trash**.
77+
## Configuring from the command line
8778

8879
### Supported output types
8980

@@ -93,28 +84,6 @@ Supports table and JSON format output types. For each command, there's a default
9384

9485
`-output table`
9586

96-
### From the command line
97-
98-
- `sudo '/Library/Application Support/Microsoft/Defender/uninstall/uninstall'`
99-
100-
### Using JAMF Pro
101-
102-
To uninstall Microsoft Defender for Endpoint on macOS using JAMF Pro upload the offboarding profile.
103-
104-
The offboarding profile should be uploaded without any modifications, and with Preference Domain name set to `com.microsoft.wdav.atp.offboarding`, as shown in the following image:
105-
106-
:::image type="content" source="/defender/media/defender-endpoint/jamf-pro-offboarding.png" alt-text="Screenshot of the JAMF offboarding screen" lightbox="/defender/media/defender-endpoint/jamf-pro-offboarding.png":::
107-
108-
109-
> [!NOTE]
110-
> If you have trouble uninstalling Defender for Endpoint on Mac, and you see in your reports an item for *Microsoft Defender Endpoint Security Extension*, follow these steps:
111-
> 1. Reinstall the Microsoft Defender app.
112-
> 2. Drag **Microsoft Defender.app** to **Trash**.
113-
> 3. Run this command: `sudo /Library/Application Support/Microsoft/Defender/uninstall/install_helper execute --path '/Library/Application Support/Microsoft/Defender/uninstall/uninstall' --args --post-uninstall-hook`.
114-
> 4. Restart the device.
115-
116-
## Configuring from the command line
117-
11887
Important tasks, such as controlling product settings and triggering on-demand scans, can be done by using the command line:
11988

12089
|Group|Scenario|Command|
@@ -201,6 +170,37 @@ To enable autocompletion in zsh:
201170

202171
`/Library/Application Support/Microsoft/Defender/quarantine/` contains the files quarantined by `mdatp`. The files are named after the threat trackingId. The current trackingIds are shown with `mdatp threat list`.
203172

173+
## Uninstalling
174+
175+
> [!NOTE]
176+
> Before uninstalling Microsoft Defender for Endpoint on macOS, offboard each device per [Offboard non-Windows devices](configure-endpoints-non-windows.md).
177+
178+
There are several ways to uninstall Microsoft Defender for Endpoint on macOS. Although centrally managed uninstallation is available on JAMF, it's not yet available for Microsoft Intune.
179+
180+
### Interactive uninstallation
181+
182+
- Open **Finder > Applications**. Right click on **Microsoft Defender for Endpoint**, and then select **Move to Trash**.
183+
184+
### From the command line
185+
186+
- `sudo '/Library/Application Support/Microsoft/Defender/uninstall/uninstall'`
187+
188+
### Using JAMF Pro
189+
190+
To uninstall Microsoft Defender for Endpoint on macOS using JAMF Pro upload the offboarding profile.
191+
192+
The offboarding profile should be uploaded without any modifications, and with Preference Domain name set to `com.microsoft.wdav.atp.offboarding`, as shown in the following image:
193+
194+
:::image type="content" source="/defender/media/defender-endpoint/jamf-pro-offboarding.png" alt-text="Screenshot of the JAMF offboarding screen" lightbox="/defender/media/defender-endpoint/jamf-pro-offboarding.png":::
195+
196+
197+
> [!NOTE]
198+
> If you have trouble uninstalling Defender for Endpoint on Mac, and you see in your reports an item for *Microsoft Defender Endpoint Security Extension*, follow these steps:
199+
> 1. Reinstall the Microsoft Defender app.
200+
> 2. Drag **Microsoft Defender.app** to **Trash**.
201+
> 3. Run this command: `sudo /Library/Application Support/Microsoft/Defender/uninstall/install_helper execute --path '/Library/Application Support/Microsoft/Defender/uninstall/uninstall' --args --post-uninstall-hook`.
202+
> 4. Restart the device.
203+
204204
## Microsoft Defender for Endpoint portal information
205205

206206
The Microsoft Defender for Endpoint blog,

0 commit comments

Comments
 (0)