How to make MS Defender ATP installation fully silent?

JAMFNoob
New Contributor III

Hey everyone - currently I am using this guide to deploy MS Defender on all our macs in our environment:

https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/mac-jamfpro-policies?view=...

Now while this deploys MS Defender all good, I still get a prompt requesting the user to Allow MS Defender to filter network content and another requiring them to click OK on a MS Autoupdate "Required Data Notice" message.

Anyway to make it so these are always agreed to without user intervention and therefore making the deployment completely silent?

2 REPLIES 2

lawinski
New Contributor III

For the filter network content you are missing the following configuration.

For AutoUpdate try this as custom preference under the pref domain com.microsoft.autoupdate2:

 

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
	<dict>
		<key>AcknowledgedDataCollectionPolicy</key>
		<string>RequiredDataOnly</string>
		<key>IgnoreUIOpenAfterInstall</key>
		<true />
	</dict>
</plist>

 

You can replace RequiredDataOnly with RequiredAndOptionalData if you desire.

JAMFNoob
New Contributor III

I actually left this configuration policy out completely due to the fact that in my JAMF Pro I do not seem to have a Content Filter tab at all...it's pretty strange. Not sure if there is a legacy method of doing this?