Skip to main content
Question

How to make MS Defender ATP installation fully silent?

  • December 22, 2021
  • 2 replies
  • 77 views

Forum|alt.badge.img+6

Hey everyone - currently I am using this guide to deploy MS Defender on all our macs in our environment:

https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/mac-jamfpro-policies?view=o365-worldwide

Now while this deploys MS Defender all good, I still get a prompt requesting the user to Allow MS Defender to filter network content and another requiring them to click OK on a MS Autoupdate "Required Data Notice" message.

Anyway to make it so these are always agreed to without user intervention and therefore making the deployment completely silent?

2 replies

Forum|alt.badge.img+6
  • Contributor
  • December 22, 2021

For the filter network content you are missing the following configuration.

For AutoUpdate try this as custom preference under the pref domain com.microsoft.autoupdate2:

 

<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>AcknowledgedDataCollectionPolicy</key> <string>RequiredDataOnly</string> <key>IgnoreUIOpenAfterInstall</key> <true /> </dict> </plist>

 

You can replace RequiredDataOnly with RequiredAndOptionalData if you desire.


Forum|alt.badge.img+6
  • Author
  • Contributor
  • December 22, 2021

For the filter network content you are missing the following configuration.

For AutoUpdate try this as custom preference under the pref domain com.microsoft.autoupdate2:

 

<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>AcknowledgedDataCollectionPolicy</key> <string>RequiredDataOnly</string> <key>IgnoreUIOpenAfterInstall</key> <true /> </dict> </plist>

 

You can replace RequiredDataOnly with RequiredAndOptionalData if you desire.


I actually left this configuration policy out completely due to the fact that in my JAMF Pro I do not seem to have a Content Filter tab at all...it's pretty strange. Not sure if there is a legacy method of doing this?