If the configuration is not deployed prior to the activation of the new Microsoft Defender ATP for Mac agent implementation, end-users will be presented with a series of system dialogs asking to grant the agent all necessary permissions associated with the new system extensions. To ensure that the Microsoft Defender ATP for Mac system extensions-based update is delivered and applied seamlessly from an end-user experience perspective, a new remote configuration must be deployed to all eligible macOS devices before the new code path is activated. How to prepare for activation of the system extensions-based update Once macOS 11 Big Sur is generally available, the new system extensions-based implementation will be activated on all devices running macOS 11. Prior to the general availability of macOS 11 Big Sur, the new system extensions-based code path can be activated on devices running macOS Catalina version 10.15.4 or later and registered for the InsiderFast MAU update channel. If you have not yet opted into previews, we encourage you to turn on preview features in the Microsoft Defender Security Center today. To experience the new system extensions-based implementation during public preview, you’ll need to have preview features turned on in the Microsoft Defender Security Center. What devices are eligible for the system extensions-based update? Refer to our system extensions-based update documentation for additional update related details and how to determine if a device is running the new version based on system extensions.Īfter successfully deploying and activating the update, the on-device experience will remain unchanged. The system extensions-based version of Microsoft Defender ATP for Mac will be delivered to all macOS devices via the existing Microsoft AutoUpdate (MAU) channel. How will the system extensions-based update be delivered? In alignment with Apple’s strategy, public preview is now open for Microsoft Defender ATP for Mac implementation that leverages the new system extensions instead of kernel extensions.

Apple is shifting away from kernel extensions, starting with macOS 11 Big Sur. We are also committed to minimizing security agent related friction as organizations migrate to the next major macOS version. As part of our commitment to provide the best in market endpoint protection to our customers, we strive to ensure that Microsoft Defender ATP for Mac evolves in lock step with the macOS platform.

Program for mac extension