Skip to content

mac-device-control-faq.md

Latest commit

 

History

History
54 lines (38 loc) · 2.31 KB

mac-device-control-faq.md

File metadata and controls

54 lines (38 loc) · 2.31 KB

title: macOS Device control policies frequently asked questions (FAQ) description: Get answers to common questions about device control policies using JAMF or Intune. ms.service: defender-endpoint author: limwainstein ms.author: lwainstein ms.reviewer: joshbregman manager: bagol ms.localizationpriority: medium audience: ITPro ms.collection:

  • m365-security
  • tier3
  • mde-macos ms.topic: faq ms.subservice: macos search.appverid: met150 ms.date: 04/16/2025 appliesto:
    • Microsoft Defender for Endpoint Plan 1
    • Microsoft Defender for Endpoint Plan 2
    • Microsoft Defender for Business

macOS Device Control policies frequently asked questions (FAQ)

This article provides answers to frequently asked questions about Device Control capabilities in Microsoft Defender for Endpoint.

Questions | Answers

How do I know whether the machine is Device Control enabled, and what is the Default Enforcement?

Answer: Run mdatp device-control policy preferences list to see all the iOS policies on this machine:

:::image type="content" source="media/macos-device-control-faq-enabled-default-enforcement.png" alt-text="Shows how to run mdatp device-control policy preferences list to see if a device is Device Control enabled. " lightbox="media/macos-device-control-faq-enabled-default-enforcement.png":::

How do I know if the policy is delivered to the client machine?

Answer: Run mdatp device-control policy rules list to see all the iOS policies on this machine:

:::image type="content" source="media/macos-device-control-faq-policy-is-on-client.png" alt-text="Shows how to run mdatp device-control policy rules list to determine whether a policy has been configured on the endpoint." lightbox="media/macos-device-control-faq-policy-is-on-client.png":::

Answer 2: Run mdatp device-control policy groups list to see all the iOS groups on this machine:

:::image type="content" source="media/macos-device-control-faq-policy-is-on-client-ios-groups.png" alt-text="Shows how to see all of the iOS groups on the device." lightbox="media/macos-device-control-faq-policy-is-on-client-ios-groups.png":::

See also