diff --git a/windows/security/threat-protection/microsoft-defender-atp/mac-device-control-overview.md b/windows/security/threat-protection/microsoft-defender-atp/mac-device-control-overview.md index fd290e6f59..90c207978f 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mac-device-control-overview.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mac-device-control-overview.md @@ -42,22 +42,7 @@ Device control can be enabled: >[!div class="checklist"] > - Microsoft Defender for Endpoint entitlement (can be trial) > - Minimum OS version: macOS 10.15.4 or higher -> - Minimum product version: 101.22.78 -> - Your device must be in the InsiderFast Microsoft AutoUpdate update channel. -> -> You can check the update channel using the following command: -> -> ```bash -> mdatp health --field release_ring -> ``` -> -> If your device is not in the InsiderFast update channel, execute the following command from the Terminal. The channel update takes effect next time the product starts (when the next product update is installed or when the device is rebooted). -> -> ```bash -> defaults write com.microsoft.autoupdate2 ChannelName -string InsiderFast -> ``` -> -> Alternatively, if you are in a managed environment (JAMF or Intune), you can configure the update channel remotely. For more information, see [this page](mac-updates.md). +> - Minimum product version: 101.24.59 > - Your device must be running with system extensions (this is the default on macOS 11 Big Sur). > > You can check if your device is running on system extensions, run the following command and verify that it is printing `endpoint_security_extension` to the console: @@ -65,6 +50,21 @@ Device control can be enabled: > ```bash > mdatp health --field real_time_protection_subsystem > ``` +> - Your device must be in `Beta` (previously called `InsiderFast`) Microsoft AutoUpdate update channel. For more information, see [Deploy updates for Microsoft Defender for Endpoint for Mac](mac-updates.md). +> +> You can check the update channel using the following command: +> +> ```bash +> mdatp health --field release_ring +> ``` +> +> If the above command does not print either `Beta` or `InsiderFast`, execute the following command from the Terminal. The channel update takes effect next time the product starts (when the next product update is installed or when the device is rebooted). +> +> ```bash +> defaults write com.microsoft.autoupdate2 ChannelName -string Beta +> ``` +> +> Alternatively, if you are in a managed environment (JAMF or Intune), you can configure the update channel remotely. For more information, see [Deploy updates for Microsoft Defender for Endpoint for Mac](mac-updates.md). ## Device control policy diff --git a/windows/security/threat-protection/microsoft-defender-atp/mac-jamfpro-policies.md b/windows/security/threat-protection/microsoft-defender-atp/mac-jamfpro-policies.md index 7fdbbda41d..5ef007a357 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mac-jamfpro-policies.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mac-jamfpro-policies.md @@ -410,7 +410,7 @@ These steps are applicable of macOS 10.15 (Catalina) or newer. ChannelName - Production + Current HowToCheck AutomaticDownload EnableCheckForUpdatesButton diff --git a/windows/security/threat-protection/microsoft-defender-atp/mac-sysext-preview.md b/windows/security/threat-protection/microsoft-defender-atp/mac-sysext-preview.md index 57c75b7e1f..2dcc5842d6 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mac-sysext-preview.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mac-sysext-preview.md @@ -55,7 +55,7 @@ These steps assume you already have Defender for Endpoint running on your device If your device isn't already in the Insider Fast update channel, execute the following command from the Terminal. The channel update takes effect the next time the product starts (when the next product update is installed, or when the device is rebooted). ```bash - defaults write com.microsoft.autoupdate2 ChannelName -string InsiderFast + defaults write com.microsoft.autoupdate2 ChannelName -string Beta ``` Alternatively, if you're in a managed environment (JAMF or Intune), you can configure the update channel remotely. For more information, see [Deploy updates for Microsoft Defender ATP for Mac: Set the channel name](mac-updates.md#set-the-channel-name). diff --git a/windows/security/threat-protection/microsoft-defender-atp/mac-updates.md b/windows/security/threat-protection/microsoft-defender-atp/mac-updates.md index 518755e4a6..26d1b1bccb 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mac-updates.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mac-updates.md @@ -57,19 +57,26 @@ This section describes the most common preferences that can be used to configure ### Set the channel name -The channel determines the type and frequency of updates that are offered through MAU. Devices in `InsiderFast` (corresponding to the Insider Fast channel) can try out new features before devices in `External` (corresponding to the Insider Slow channel) and `Production`. +The channel determines the type and frequency of updates that are offered through MAU. Devices in `Beta` can try out new features before devices in `Preview` and `Current`. -The `Production` channel contains the most stable version of the product. +The `Current` channel contains the most stable version of the product. + +>[!IMPORTANT] +> Prior to Microsoft AutoUpdate version 4.29, channels had different names: +> +> - `Beta` was named `InsiderFast` (Insider Fast) +> - `Preview` was named `External` (Insider Slow) +> - `Current` was named `Production` >[!TIP] ->In order to preview new features and provide early feedback, it is recommended that you configure some devices in your enterprise to `InsiderFast` or `External`. +>In order to preview new features and provide early feedback, it is recommended that you configure some devices in your enterprise to `Beta` or `Preview`. ||| |:---|:---| | **Domain** | com.microsoft.autoupdate2 | | **Key** | ChannelName | | **Data type** | String | -| **Possible values** | InsiderFast
External
Production | +| **Possible values** | Beta
Preview
Current | >[!WARNING] >This setting changes the channel for all applications that are updated through Microsoft AutoUpdate. To change the channel only for Microsoft Defender for Endpoint for Mac, execute the following command after replacing `[channel-name]` with the desired channel: @@ -137,7 +144,7 @@ Set to false to send minimal heartbeat data, no application usage, and no enviro ## Example configuration profile The following configuration profile is used to: -- Place the device in the Insider Fast channel +- Place the device in the Beta channel - Automatically download and install updates - Enable the "Check for updates" button in the user interface - Allow users on the device to enroll into the Insider channels @@ -150,7 +157,7 @@ The following configuration profile is used to: ChannelName - InsiderFast + Beta HowToCheck AutomaticDownload EnableCheckForUpdatesButton @@ -210,7 +217,7 @@ The following configuration profile is used to: PayloadEnabled ChannelName - InsiderFast + Beta HowToCheck AutomaticDownload EnableCheckForUpdatesButton