On macOS Catalina we need to allow MDATP to have full access to all files on the machine with a specific configuration.This is where we decide how MDATP is behaving on your devices like enabling real-time protection.I recommend the following configurations to be deployed before deploying the Defender ATP application to our machines: To make MDATP work as we want it to we need to have some additional settings in addition to the ones in the on-boarding package. Required configuration for MDATP to work on macOS Catalina But before we go into the details of this let us have a look of what else is needed. We have kext.xml which is for configuring kernel extensions on your macOS devices, and the WindowsDefenderATPOnboarding.xml that contains your tenant on-boarding information. Delete the jamf folder as we are using Intune to do this. In this folder you find a folder for Jamf and a folder for Intune. You will now get a file called WindowsDefenderATPOnboardingPackage.zip in your Downloads folder.

Defender for endpoint mac