Onboard macOS to Microsoft Defender ATP with Microsoft Intune

Thu, 23 May 2019 14:23:57 +0000

Microsoft Defender ATP (MDATP) for macOS hit finally the public preview status. We can now protect our macOS endpoints with cloud based power. I created a little guide about the onboarding process with Microsoft Intune and the user experience.

Prerequisites
#

From a macOS endpoint perspective:

macOS version 10.12 (Sierra) or newer
No third party endpoint protection installed
At least 1GB of free disk space
macOS client enrolled in your Intune tenant

If you want to enable macOS enrollment for your Intune tenant - I’ve written a post about the enrollment process.

From a Microsoft 365 perspective:

Microsoft Defender ATP license (Windows 10 Enterprise E5)
Intune tenant wit macOS enrollment enabled
Access to the Microsoft Defender Security Center
Appropriate user rights to create and assign an Intune device configuration, LOB App

This post assumes that you perform the tasks and file preparation on a macOS machine.

Preparing the onboarding package and files
#

Access the Microsoft Defender Security Center and gather the installation and onboarding package:

To deploy the installation package with Microsoft Intune we need the Intune app wrapping tool for macOS which is available here.

Microsoft-Defender-Atp on Nicola Suter

Onboard macOS to Microsoft Defender ATP with Microsoft Intune

Prerequisites #

Preparing the onboarding package and files #

Prerequisites
#

Preparing the onboarding package and files
#