| title | macOS Device control policies frequently asked questions (FAQ) | |||
|---|---|---|---|---|
| description | Get answers to common questions about device control policies using JAMF or Intune. | |||
| ms.service | defender-endpoint | |||
| author | limwainstein | |||
| ms.author | lwainstein | |||
| ms.reviewer | joshbregman | |||
| ms.localizationpriority | medium | |||
| ms.collection |
|
|||
| ms.topic | faq | |||
| ms.subservice | macos | |||
| ms.date | 04/16/2025 | |||
| appliesto |
|
This article provides answers to frequently asked questions about Device Control capabilities in Microsoft Defender for Endpoint.
Answer: Run mdatp device-control policy preferences list to see all the iOS policies on this machine:
:::image type="content" source="media/macos-device-control-faq-enabled-default-enforcement.png" alt-text="Shows how to run mdatp device-control policy preferences list to see if a device is Device Control enabled. " lightbox="media/macos-device-control-faq-enabled-default-enforcement.png":::
Answer: Run mdatp device-control policy rules list to see all the iOS policies on this machine:
:::image type="content" source="media/macos-device-control-faq-policy-is-on-client.png" alt-text="Shows how to run mdatp device-control policy rules list to determine whether a policy has been configured on the endpoint." lightbox="media/macos-device-control-faq-policy-is-on-client.png":::
Answer 2: Run mdatp device-control policy groups list to see all the iOS groups on this machine:
:::image type="content" source="media/macos-device-control-faq-policy-is-on-client-ios-groups.png" alt-text="Shows how to see all of the iOS groups on the device." lightbox="media/macos-device-control-faq-policy-is-on-client-ios-groups.png":::