deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-06-17 19:33:37 +00:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

Lots of corrections to indentation and spacing

Browse Source 
If I'm lucky, this won't require another commit.
This commit is contained in:
Gary Moore
2020-10-01 16:33:44 -07:00
committed by GitHub
parent 0f513ecf85
commit eb1fa84d5a
1 changed files with 176 additions and 165 deletions
Download Patch File Download Diff File Expand all files Collapse all files

341
windows/security/threat-protection/microsoft-defender-atp/mac-jamfpro-policies.md
View File

@ -159,106 +159,106 @@ You'll need to take the following steps:
For information, see [Property list for Jamf configuration profile](mac-preferences.md#property-list-for-jamf-configuration-profile). For information, see [Property list for Jamf configuration profile](mac-preferences.md#property-list-for-jamf-configuration-profile).
```XML ```XML
<?xml version="1.0" encoding="UTF-8"?> <?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0"> <plist version="1.0">
<dict> <dict>
<key>antivirusEngine</key> <key>antivirusEngine</key>
<dict> <dict>
<key>enableRealTimeProtection</key> <key>enableRealTimeProtection</key>
<true/> <true/>
<key>passiveMode</key> <key>passiveMode</key>
<false/> <false/>
<key>exclusions</key> <key>exclusions</key>
<array> <array>
<dict> <dict>
<key>$type</key> <key>$type</key>
<string>excludedPath</string> <string>excludedPath</string>
<key>isDirectory</key> <key>isDirectory</key>
<false/> <false/>
<key>path</key> <key>path</key>
<string>/var/log/system.log</string> <string>/var/log/system.log</string>
</dict> </dict>
<dict> <dict>
<key>$type</key> <key>$type</key>
<string>excludedPath</string> <string>excludedPath</string>
<key>isDirectory</key> <key>isDirectory</key>
<true/> <true/>
<key>path</key> <key>path</key>
<string>/home</string> <string>/home</string>
</dict> </dict>
<dict> <dict>
<key>$type</key> <key>$type</key>
<string>excludedFileExtension</string> <string>excludedFileExtension</string>
<key>extension</key> <key>extension</key>
<string>pdf</string> <string>pdf</string>
</dict> </dict>
<dict> <dict>
<key>$type</key> <key>$type</key>
<string>excludedFileName</string> <string>excludedFileName</string>
<key>name</key> <key>name</key>
<string>cat</string> <string>cat</string>
</dict> </dict>
</array> </array>
<key>exclusionsMergePolicy</key> <key>exclusionsMergePolicy</key>
<string>merge</string> <string>merge</string>
<key>allowedThreats</key> <key>allowedThreats</key>
<array> <array>
<string>EICAR-Test-File (not a virus)</string> <string>EICAR-Test-File (not a virus)</string>
</array> </array>
<key>disallowedThreatActions</key> <key>disallowedThreatActions</key>
<array> <array>
<string>allow</string> <string>allow</string>
<string>restore</string> <string>restore</string>
</array> </array>
<key>threatTypeSettings</key> <key>threatTypeSettings</key>
<array> <array>
<dict> <dict>
<key>key</key> <key>key</key>
<string>potentially_unwanted_application</string> <string>potentially_unwanted_application</string>
<key>value</key> <key>value</key>
<string>block</string> <string>block</string>
</dict> </dict>
<dict> <dict>
<key>key</key> <key>key</key>
<string>archive_bomb</string> <string>archive_bomb</string>
<key>value</key> <key>value</key>
<string>audit</string> <string>audit</string>
</dict> </dict>
</array> </array>
<key>threatTypeSettingsMergePolicy</key> <key>threatTypeSettingsMergePolicy</key>
<string>merge</string> <string>merge</string>
</dict> </dict>
<key>cloudService</key> <key>cloudService</key>
<dict> <dict>
<key>enabled</key> <key>enabled</key>
<true/> <true/>
<key>diagnosticLevel</key> <key>diagnosticLevel</key>
<string>optional</string> <string>optional</string>
<key>automaticSampleSubmission</key> <key>automaticSampleSubmission</key>
<true/> <true/>
</dict> </dict>
<key>edr</key> <key>edr</key>
<dict> <dict>
<key>tags</key> <key>tags</key>
<array> <array>
<dict> <dict>
<key>key</key> <key>key</key>
<string>GROUP</string> <string>GROUP</string>
<key>value</key> <key>value</key>
<string>ExampleTag</string> <string>ExampleTag</string>
</dict> </dict>
</array> </array>
</dict> </dict>
<key>userInterface</key> <key>userInterface</key>
<dict> <dict>
<key>hideStatusMenuIcon</key> <key>hideStatusMenuIcon</key>
<false/> <false/>
</dict> </dict>
</dict> </dict>
</plist> </plist>
``` ```
2. Save the file as `MDATP_MDAV_configuration_settings.plist`. 2. Save the file as `MDATP_MDAV_configuration_settings.plist`.
@ -270,11 +270,12 @@ You'll need to take the following steps:
4. Enter the following details: 4. Enter the following details:
**General** **General**
- Name: MDATP MDAV configuration settings
- Description:\<blank\> - Name: MDATP MDAV configuration settings
- Category: None (default) - Description:\<blank\>
- Distribution Method: Install Automatically(default) - Category: None (default)
- Level: Computer Level(default) - Distribution Method: Install Automatically(default)
- Level: Computer Level(default)
![Image of configuration settings](images/3160906404bc5a2edf84d1d015894e3b.png) ![Image of configuration settings](images/3160906404bc5a2edf84d1d015894e3b.png)
@ -349,11 +350,12 @@ These steps are applicable of macOS 10.15 (Catalina) or newer.
4. Enter the following details: 4. Enter the following details:
**General** **General**
- Name: MDATP MDAV Notification settings
- Description: macOS 10.15 (Catalina) or newer - Name: MDATP MDAV Notification settings
- Category: None (default) - Description: macOS 10.15 (Catalina) or newer
- Distribution Method: Install Automatically(default) - Category: None (default)
- Level: Computer Level(default) - Distribution Method: Install Automatically(default)
- Level: Computer Level(default)
![Image of configuration settings](images/c9820a5ff84aaf21635c04a23a97ca93.png) ![Image of configuration settings](images/c9820a5ff84aaf21635c04a23a97ca93.png)
@ -399,11 +401,11 @@ These steps are applicable of macOS 10.15 (Catalina) or newer.
1. Use the following Microsoft Defender ATP configuration settings: 1. Use the following Microsoft Defender ATP configuration settings:
```XML ```XML
<?xml version="1.0" encoding="UTF-8"?> <?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0"> <plist version="1.0">
<dict> <dict>
<key>ChannelName</key> <key>ChannelName</key>
<string>Production</string> <string>Production</string>
<key>HowToCheck</key> <key>HowToCheck</key>
@ -414,9 +416,9 @@ These steps are applicable of macOS 10.15 (Catalina) or newer.
<false/> <false/>
<key>SendAllTelemetryEnabled</key> <key>SendAllTelemetryEnabled</key>
<true/> <true/>
</dict> </dict>
</plist> </plist>
``` ```
2. Save it as `MDATP_MDAV_MAU_settings.plist`. 2. Save it as `MDATP_MDAV_MAU_settings.plist`.
@ -427,11 +429,12 @@ These steps are applicable of macOS 10.15 (Catalina) or newer.
4. Enter the following details: 4. Enter the following details:
**General** **General**
- Name: MDATP MDAV MAU settings
- Description: Microsoft AutoUpdate settings for MDATP for macOS - Name: MDATP MDAV MAU settings
- Category: None (default) - Description: Microsoft AutoUpdate settings for MDATP for macOS
- Distribution Method: Install Automatically(default) - Category: None (default)
- Level: Computer Level(default) - Distribution Method: Install Automatically(default)
- Level: Computer Level(default)
5. In **Application & Custom Settings** select **Configure**. 5. In **Application & Custom Settings** select **Configure**.
@ -515,10 +518,9 @@ These steps are applicable of macOS 10.15 (Catalina) or newer.
![Image of configuration setting](images/bd93e78b74c2660a0541af4690dd9485.png) ![Image of configuration setting](images/bd93e78b74c2660a0541af4690dd9485.png)
- Under App or service: Set to **SystemPolicyAllFiles**
- Under App or service: Set to **SystemPolicyAllFiles** - Under "access": Set to **Allow**
- Under "access": Set to **Allow**
7. Select **Save** (not the one at the bottom right). 7. Select **Save** (not the one at the bottom right).
@ -538,9 +540,9 @@ These steps are applicable of macOS 10.15 (Catalina) or newer.
![Image of configuration setting](images/tcc-epsext-entry.png) ![Image of configuration setting](images/tcc-epsext-entry.png)
- Under App or service: Set to **SystemPolicyAllFiles** - Under App or service: Set to **SystemPolicyAllFiles**
- Under "access": Set to **Allow** - Under "access": Set to **Allow**
11. Select **Save** (not the one at the bottom right). 11. Select **Save** (not the one at the bottom right).
@ -578,11 +580,12 @@ These steps are applicable of macOS 10.15 (Catalina) or newer.
2. Enter the following details: 2. Enter the following details:
**General** **General**
- Name: MDATP MDAV Kernel Extension
- Description: MDATP kernel extension (kext) - Name: MDATP MDAV Kernel Extension
- Category: None - Description: MDATP kernel extension (kext)
- Distribution Method: Install Automatically - Category: None
- Level: Computer Level - Distribution Method: Install Automatically
- Level: Computer Level
![Image of configuration settings](images/24e290f5fc309932cf41f3a280d22c14.png) ![Image of configuration settings](images/24e290f5fc309932cf41f3a280d22c14.png)
@ -591,11 +594,10 @@ These steps are applicable of macOS 10.15 (Catalina) or newer.
![Image of configuration settings](images/30be88b63abc5e8dde11b73f1b1ade6a.png) ![Image of configuration settings](images/30be88b63abc5e8dde11b73f1b1ade6a.png)
4. In **Approved Kernel Extensions** Enter the following details: 4. In **Approved Kernel Extensions** Enter the following details:
- Display Name: Microsoft Corp. - Display Name: Microsoft Corp.
- Team ID: UBF8T346G9 - Team ID: UBF8T346G9
![Image of configuration settings](images/39cf120d3ac3652292d8d1b6d057bd60.png) ![Image of configuration settings](images/39cf120d3ac3652292d8d1b6d057bd60.png)
@ -629,26 +631,27 @@ These steps are applicable of macOS 10.15 (Catalina) or newer.
2. Enter the following details: 2. Enter the following details:
**General** **General**
- Name: MDATP MDAV System Extensions
- Description: MDATP system extensions - Name: MDATP MDAV System Extensions
- Category: None - Description: MDATP system extensions
- Distribution Method: Install Automatically - Category: None
- Level: Computer Level - Distribution Method: Install Automatically
- Level: Computer Level
![Image of configuration settings](images/sysext-new-profile.png) ![Image of configuration settings](images/sysext-new-profile.png)
3. In **System Extensions** select **Configure**. 3. In **System Extensions** select **Configure**.
![Image of configuration settings](images/sysext-configure.png) ![Image of configuration settings](images/sysext-configure.png)
4. In **System Extensions** enter the following details: 4. In **System Extensions** enter the following details:
- Display Name: Microsoft Corp. System Extensions - Display Name: Microsoft Corp. System Extensions
- System Extension Types: Allowed System Extensions - System Extension Types: Allowed System Extensions
- Team Identifier: UBF8T346G9 - Team Identifier: UBF8T346G9
- Allowed System Extensions: - Allowed System Extensions:
- **com.microsoft.wdav.epsext** - **com.microsoft.wdav.epsext**
- **com.microsoft.wdav.netext** - **com.microsoft.wdav.netext**
![Image of configuration settings](images/sysext-configure2.png) ![Image of configuration settings](images/sysext-configure2.png)
@ -662,11 +665,11 @@ These steps are applicable of macOS 10.15 (Catalina) or newer.
8. Select **+ Add**. 8. Select **+ Add**.
![Image of configuration settings](images/0dde8a4c41110dbc398c485433a81359.png) ![Image of configuration settings](images/0dde8a4c41110dbc398c485433a81359.png)
9. Select **Save**. 9. Select **Save**.
![Image of configuration settings](images/sysext-scope.png) ![Image of configuration settings](images/sysext-scope.png)
10. Select **Done**. 10. Select **Done**.
@ -686,31 +689,31 @@ As part of the Endpoint Detection and Response capabilities, Microsoft Defender
3. After the certificate is created and installed to your device, run the following command from the Terminal from a macOS device: 3. After the certificate is created and installed to your device, run the following command from the Terminal from a macOS device:
```bash ```bash
$ security cms -S -N "<certificate name>" -i com.microsoft.network-extension.mobileconfig -o com.microsoft.network-extension.signed.mobileconfig $ security cms -S -N "<certificate name>" -i com.microsoft.network-extension.mobileconfig -o com.microsoft.network-extension.signed.mobileconfig
``` ```
![Terminal window with command to create signed configuration](images/netext-create-profile.png) ![Terminal window with command to create signed configuration](images/netext-create-profile.png)
4. From the JAMF portal, navigate to **Configuration Profiles** and click the **Upload** button. 4. From the JAMF portal, navigate to **Configuration Profiles** and click the **Upload** button.
![Image of upload window](images/netext-upload-file.png) ![Image of upload window](images/netext-upload-file.png)
5. Select **Choose File** and select `microsoft.network-extension.signed.mobileconfig`. 5. Select **Choose File** and select `microsoft.network-extension.signed.mobileconfig`.
![Image of upload window](images/netext-choose-file.png) ![Image of upload window](images/netext-choose-file.png)
6. Select **Upload**. 6. Select **Upload**.
![Image of upload window](images/netext-upload-file2.png) ![Image of upload window](images/netext-upload-file2.png)
7. After uploading the file, you are redirected to a new page to finalize the creation of this profile. 7. After uploading the file, you are redirected to a new page to finalize the creation of this profile.
![Image of new configuration profile](images/netext-profile-page.png) ![Image of new configuration profile](images/netext-profile-page.png)
8. Select the **Scope** tab. 8. Select the **Scope** tab.
![Image of configuration settings](images/0df36fc308ba569db204ee32db3fb40a.png) ![Image of configuration settings](images/0df36fc308ba569db204ee32db3fb40a.png)
9. Select **+ Add**. 9. Select **+ Add**.
@ -780,10 +783,12 @@ Follow the instructions on [Schedule scans with Microsoft Defender ATP for Mac](
![Image of configuration settings](images/56dac54634d13b2d3948ab50e8d3ef21.png) ![Image of configuration settings](images/56dac54634d13b2d3948ab50e8d3ef21.png)
9. Select **Save**. The package is uploaded to Jamf Pro. 9. Select **Save**. The package is uploaded to Jamf Pro.
![Image of configuration settings](images/33f1ecdc7d4872555418bbc3efe4b7a3.png)
It can take a few minutes for the package to be available for deployment. ![Image of configuration settings](images/33f1ecdc7d4872555418bbc3efe4b7a3.png)
![Image of configuration settings](images/1626d138e6309c6e87bfaab64f5ccf7b.png)
It can take a few minutes for the package to be available for deployment.
![Image of configuration settings](images/1626d138e6309c6e87bfaab64f5ccf7b.png)
10. Navigate to the **Policies** page. 10. Navigate to the **Policies** page.
@ -816,25 +821,31 @@ Follow the instructions on [Schedule scans with Microsoft Defender ATP for Mac](
![Image of configuration settings](images/526b83fbdbb31265b3d0c1e5fbbdc33a.png) ![Image of configuration settings](images/526b83fbdbb31265b3d0c1e5fbbdc33a.png)
17. Select **Save**. 17. Select **Save**.
![Image of configuration settings](images/9d6e5386e652e00715ff348af72671c6.png) ![Image of configuration settings](images/9d6e5386e652e00715ff348af72671c6.png)
18. Select the **Scope** tab. 18. Select the **Scope** tab.
![Image of configuration settings](images/8d80fe378a31143db9be0bacf7ddc5a3.png) ![Image of configuration settings](images/8d80fe378a31143db9be0bacf7ddc5a3.png)
19. Select the target computers. 19. Select the target computers.
![Image of configuration settings](images/6eda18a64a660fa149575454e54e7156.png) ![Image of configuration settings](images/6eda18a64a660fa149575454e54e7156.png)
**Scope**<br> **Scope**
Select **Add**. Select **Add**.
![Image of configuration settings](images/1c08d097829863778d562c10c5f92b67.png) ![Image of configuration settings](images/1c08d097829863778d562c10c5f92b67.png)
![Image of configuration settings](images/216253cbfb6ae738b9f13496b9c799fd.png) ![Image of configuration settings](images/216253cbfb6ae738b9f13496b9c799fd.png)
**Self-Service** <br> **Self-Service**
![Image of configuration settings](images/c9f85bba3e96d627fe00fc5a8363b83a.png) ![Image of configuration settings](images/c9f85bba3e96d627fe00fc5a8363b83a.png)
20. Select **Done**. 20. Select **Done**.
![Image of configuration settings](images/99679a7835b0d27d0a222bc3fdaf7f3b.png) ![Image of configuration settings](images/99679a7835b0d27d0a222bc3fdaf7f3b.png)
![Image of configuration settings](images/632aaab79ae18d0d2b8e0c16b6ba39e2.png) ![Image of configuration settings](images/632aaab79ae18d0d2b8e0c16b6ba39e2.png)