Skip to content

Commit bf971c6

Browse files
committed
Update mac-jamfpro-policies.md
1 parent 6a2c559 commit bf971c6

File tree

1 file changed

+26
-33
lines changed

1 file changed

+26
-33
lines changed

defender-endpoint/mac-jamfpro-policies.md

Lines changed: 26 additions & 33 deletions
Original file line numberDiff line numberDiff line change
@@ -151,11 +151,11 @@ Note that you must use exact `com.microsoft.wdav` as the **Preference Domain**;
151151

152152
:::image type="content" source="media/644e0f3af40c29e80ca1443535b2fe32.png" alt-text="A new profile." lightbox="media/644e0f3af40c29e80ca1443535b2fe32.png":::
153153

154-
- **Name**: `MDATP MDAV configuration settings`
155-
- **Description**: `<blank\>`
156-
- **Category**: `None (default)`
157-
- **Level**: `Computer Level (default)`
158-
- **Distribution Method**: `Install Automatically (default)`
154+
- **Name**: `MDATP MDAV configuration settings`
155+
- **Description**: `<blank\>`
156+
- **Category**: `None (default)`
157+
- **Level**: `Computer Level (default)`
158+
- **Distribution Method**: `Install Automatically (default)`
159159

160160
3. Scroll down to the **Application & Custom Settings** tab, select **External Applications**, select **Add**, and then use **Custom Schema** as the source for the preference domain.
161161

@@ -195,33 +195,25 @@ Microsoft Defender for Endpoint adds new settings over time. These new settings
195195

196196
1. Use the following Microsoft Defender for Endpoint configuration settings:
197197

198-
- `enableRealTimeProtection`
199-
- `passiveMode`
200-
201-
> [!NOTE]
202-
> Not turned on by default, if you are planning to run a third-party antivirus for macOS, set it to `true`.
203-
204-
- `exclusions`
205-
- `excludedPath`
206-
- `excludedFileExtension`
207-
- `excludedFileName`
208-
- `exclusionsMergePolicy`
209-
- `allowedThreats`
210-
211-
> [!NOTE]
212-
> EICAR is on the sample, if you are going through a proof-of-concept, remove it especially if you are testing EICAR.
213-
214-
- `disallowedThreatActions`
215-
- `potentially_unwanted_application`
216-
- `archive_bomb`
217-
- `cloudService`
218-
- `automaticSampleSubmission`
219-
- `tags`
220-
- `hideStatusMenuIcon`
221-
222-
For information, see [Property list for Jamf full configuration profile](mac-preferences.md#property-list-for-jamf-full-configuration-profile).
198+
- `enableRealTimeProtection`
199+
- `passiveMode` (This setting is not turned on by default. If you are planning to run a third-party antivirus for macOS, set it to `true`.)
200+
- `exclusions`
201+
- `excludedPath`
202+
- `excludedFileExtension`
203+
- `excludedFileName`
204+
- `exclusionsMergePolicy`
205+
- `allowedThreats` (EICAR is on the sample. If you are going through a proof-of-concept, remove it especially if you are testing EICAR.)
206+
- `disallowedThreatActions`
207+
- `potentially_unwanted_application`
208+
- `archive_bomb`
209+
- `cloudService`
210+
- `automaticSampleSubmission`
211+
- `tags`
212+
- `hideStatusMenuIcon`
213+
214+
For more information, see [Property list for Jamf full configuration profile](mac-preferences.md#property-list-for-jamf-full-configuration-profile).
223215

224-
```XML
216+
```XML
225217
<?xml version="1.0" encoding="UTF-8"?>
226218
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
227219
<plist version="1.0">
@@ -320,11 +312,11 @@ Microsoft Defender for Endpoint adds new settings over time. These new settings
320312
</dict>
321313
</dict>
322314
</plist>
323-
```
315+
```
324316

325317
2. Save the file as `MDATP_MDAV_configuration_settings.plist`.
326318

327-
1. In the Jamf Pro dashboard, open **Computers**, and their **Configuration Profiles**. Select **New** and switch to the **General** tab.
319+
3. In the Jamf Pro dashboard, open **Computers**, and their **Configuration Profiles**. Select **New** and switch to the **General** tab.
328320

329321
:::image type="content" source="media/644e0f3af40c29e80ca1443535b2fe32.png" alt-text="The page displaying a new profile." lightbox="media/644e0f3af40c29e80ca1443535b2fe32.png":::
330322

@@ -399,6 +391,7 @@ Microsoft Defender for Endpoint adds new settings over time. These new settings
399391

400392
> [!NOTE]
401393
> These steps are applicable on macOS 11 (Big Sur) or later. Even though Jamf supports notifications on macOS version 10.15 or later, Defender for Endpoint on Mac requires macOS 11 or later.
394+
402395
1. In the Jamf Pro dashboard, select **Computers**, then **Configuration Profiles**.
403396

404397
2. Select **New**, and then, on the **General** tab, for **Options**, specify the following details:

0 commit comments

Comments
 (0)