From 97b1472dc0b915dc34a9b571f52e18b057e5e4c8 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Mon, 22 Jun 2020 13:52:51 -0700 Subject: [PATCH] jamf pro --- .../mac-install-jamfpro-login.md | 12 ++++++------ .../mac-install-jamfpro.md | 12 ++++++------ .../mac-jamfpro-device-groups.md | 16 ++++++++-------- .../mac-jamfpro-policies.md | 18 +++++++++++------- 4 files changed, 31 insertions(+), 27 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/mac-install-jamfpro-login.md b/windows/security/threat-protection/microsoft-defender-atp/mac-install-jamfpro-login.md index 319ed3379c..7b8670b99f 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mac-install-jamfpro-login.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mac-install-jamfpro-login.md @@ -1,6 +1,6 @@ --- -title: Login to JamF Pro -description: Login to JamF Pro +title: Login to Jamf Pro +description: Login to Jamf Pro keywords: microsoft, defender, atp, mac, installation, deploy, uninstallation, intune, jamfpro, macos, catalina, mojave, high sierra search.product: eADQiWindows 10XVcnh search.appverid: met150 @@ -17,7 +17,7 @@ ms.collection: M365-security-compliance ms.topic: conceptual --- -# Log in to JamF Pro +# Log in to Jamf Pro **Applies to:** @@ -25,15 +25,15 @@ ms.topic: conceptual 1. Enter your credentials. - ![Image of JamF Pro dashboard](images/jamf-pro-portal1.png) + ![Image of Jamf Pro dashboard](images/jamf-pro-portal1.png) 2. Select **Computers**. - ![Image of JamF Pro dashboard](images/jamf-pro-dashboard.png) + ![Image of Jamf Pro dashboard](images/jamf-pro-dashboard.png) 3. You will see the settings that are available. - ![Image of JamF Pro dashboard](images/jamfpro-settings.png) + ![Image of Jamf Pro dashboard](images/jamfpro-settings.png) ## Next step diff --git a/windows/security/threat-protection/microsoft-defender-atp/mac-install-jamfpro.md b/windows/security/threat-protection/microsoft-defender-atp/mac-install-jamfpro.md index 1bfe968470..d30e79cab8 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mac-install-jamfpro.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mac-install-jamfpro.md @@ -1,6 +1,6 @@ --- -title: Deploying Microsoft Defender ATP for macOS with JamF Pro -description: Deploying Microsoft Defender ATP for macOS with JamF Pro +title: Deploying Microsoft Defender ATP for macOS with Jamf Pro +description: Deploying Microsoft Defender ATP for macOS with Jamf Pro keywords: microsoft, defender, atp, mac, installation, deploy, uninstallation, intune, jamfpro, macos, catalina, mojave, high sierra search.product: eADQiWindows 10XVcnh search.appverid: met150 @@ -17,19 +17,19 @@ ms.collection: M365-security-compliance ms.topic: conceptual --- -# Deploying Microsoft Defender ATP for macOS with JamF Pro +# Deploying Microsoft Defender ATP for macOS with Jamf Pro **Applies to:** - [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP) for Mac](microsoft-defender-atp-mac.md) -Learn how to deploy Microsoft Defender ATP for macOS with JamF Pro. +Learn how to deploy Microsoft Defender ATP for macOS with Jamf Pro. This is a multi step process. You'll need to complete all of the following steps: - [Login to the JamF Portal](mac-install-jamfpro-login.md) -- [Setup the Microsoft Defender ATP for macOS device groups in JamF Pro](mac-jamfpro-device-groups.md) -- [Setup the Microsoft Defender ATP for macOS policies in JamF Pro](mac-jamfpro-policies.md) +- [Setup the Microsoft Defender ATP for macOS device groups in Jamf Pro](mac-jamfpro-device-groups.md) +- [Setup the Microsoft Defender ATP for macOS policies in Jamf Pro](mac-jamfpro-policies.md) - [Enroll the Microsoft Defender ATP for macOS devices into JamF]() - [Enroll your macOS]() diff --git a/windows/security/threat-protection/microsoft-defender-atp/mac-jamfpro-device-groups.md b/windows/security/threat-protection/microsoft-defender-atp/mac-jamfpro-device-groups.md index 1f5786a0c5..0ca541fd88 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mac-jamfpro-device-groups.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mac-jamfpro-device-groups.md @@ -1,6 +1,6 @@ --- -title: Set up device groups in JamF Pro -description: Learn how to set up device groups in JamF Pro for Microsoft Defender ATP for macOS +title: Set up device groups in Jamf Pro +description: Learn how to set up device groups in Jamf Pro for Microsoft Defender ATP for macOS keywords: device, group, microsoft, defender, atp, mac, installation, deploy, uninstallation, intune, jamfpro, macos, catalina, mojave, high sierra search.product: eADQiWindows 10XVcnh search.appverid: met150 @@ -17,27 +17,27 @@ ms.collection: M365-security-compliance ms.topic: conceptual --- -# Set up Microsoft Defender ATP for macOS device groups in JamF Pro +# Set up Microsoft Defender ATP for macOS device groups in Jamf Pro **Applies to:** - [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP) for Mac](microsoft-defender-atp-mac.md) -Set up the device groups similar to Group policy organizational unite (OUs), Microsoft Endpoint Configuration Manager's device collection, and Intune’s device groups. +Set up the device groups similar to Group policy organizational unite (OUs), Microsoft Endpoint Configuration Manager's device collection, and Intune's device groups. 1. Navigate to **Static Computer Groups**. 2. Select **New**. - ![Image of JamF Pro](images/jamf-pro-static-group.png) + ![Image of Jamf Pro](images/jamf-pro-static-group.png) 3. Provide a display name and select **Save**. - ![Image of JamF Pro](images/jamfpro-machine-group.png) + ![Image of Jamf Pro](images/jamfpro-machine-group.png) 4. Now you will see the **Contoso's Machine Group** under **Static Computer Groups**. - ![Image of JamF Pro](images/contoso-machine-group.png) + ![Image of Jamf Pro](images/contoso-machine-group.png) ## Next step -- [Set up Microsoft Defender ATP for macOS policies in JamF Pro](mac-jamfpro-policies.md) \ No newline at end of file +- [Set up Microsoft Defender ATP for macOS policies in Jamf Pro](mac-jamfpro-policies.md) \ No newline at end of file diff --git a/windows/security/threat-protection/microsoft-defender-atp/mac-jamfpro-policies.md b/windows/security/threat-protection/microsoft-defender-atp/mac-jamfpro-policies.md index 5db877b419..f99eba154c 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mac-jamfpro-policies.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mac-jamfpro-policies.md @@ -1,6 +1,6 @@ --- -title: Setup the Microsoft Defender ATP for macOS device groups in Jamf Pro -description: Learn how to setup the Microsoft Defender ATP for macOS device groups in Jamf Pro +title: Setup the Microsoft Defender ATP for macOS policies in Jamf Pro +description: Learn how to setup the Microsoft Defender ATP for macOS policies in Jamf Pro keywords: microsoft, defender, atp, mac, installation, deploy, uninstallation, intune, jamfpro, macos, catalina, mojave, high sierra search.product: eADQiWindows 10XVcnh search.appverid: met150 @@ -17,13 +17,13 @@ ms.collection: M365-security-compliance ms.topic: conceptual --- -# Setup the Microsoft Defender ATP for macOS device groups in Jamf Pro +# Setup the Microsoft Defender ATP for macOSpolicies in Jamf Pro **Applies to:** - [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP) for Mac](microsoft-defender-atp-mac.md) -1. In the JamF Pro dashboard, navigate to **Configuration Profiles**. +1. In the Jamf Pro dashboard, navigate to **Configuration Profiles**. 2. Select **New**. @@ -218,14 +218,18 @@ Save it as `AutoEnable_notifications_for_MDATP_AutoUpdate.mobileconfig` or `MDAT For more information, see [Privacy preferences policy control](mac-install-with-jamf.md#privacy-preferences-policy-control). a. Select **Options > Privacy Preferences Policy Control**. + b. Use any identifier and identifier type = Bundle. + c. Set Code Requirement to identifier 'com.microsoft.wdav' and `anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = UBF8T346G9`. + d. Set app or service to `SystemPolicyAllFiles` and access to `Allow`. 14. Approve Kernel Extension for Microsoft Defender ATP. - a. In **Computers > Configuration Profiles select Options > Approved Kernel Extensions**. - b. Use **UBF8T346G9** for **Team Id**. + a. In **Computers > Configuration Profiles select Options > Approved Kernel Extensions**. + + b. Use **UBF8T346G9** for **Team Id**. ## Onboard the package @@ -234,7 +238,7 @@ Save it as `AutoEnable_notifications_for_MDATP_AutoUpdate.mobileconfig` or `MDAT ![Image of file](images/plist-onboarding-file.png) -2. In the JamF Pro dashboard, select **New**. +2. In the Jamf Pro dashboard, select **New**. ![Image of Jamf Pro dashboard](images/jamf-pro-configure-profile.png)