Defender for Endpoint (MDE) Configuration

How to configure Defender for Endpoint (MDE) Configuration for your Intune tenant.

Click on the link to download the JSON file from GitHub

Login Service Management - Managed Login Items

Setting	Value
Rule Value	com.microsoft.dlp
Rule Type	Label Prefix
Rule Value	com.microsoft.fresno
Rule Type	Label Prefix

Microsoft AutoUpdate (MAU)

Setting	Value
Microsoft Defender Application ID	WDAV00
Microsoft Defender LCID	1033
Update channel override	Current Channel

Privacy Preferences Policy Control

Setting	Value
Allowed	True
Authorization	Allow
Static Code	False
Code Requirement	identifier "com.microsoft.wdav" and anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] /* exists / and certificate leaf[field.1.2.840.113635.100.6.1.13] / exists */ and certificate leaf[subject.OU] = UBF8T346G9
Identifier Type	bundle ID
Identifier	com.microsoft.wdav
Allowed	True
Authorization	Allow
Static Code	False
Code Requirement	identifier "com.microsoft.wdav.epsext" and anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] /* exists / and certificate leaf[field.1.2.840.113635.100.6.1.13] / exists */ and certificate leaf[subject.OU] = UBF8T346G9
Identifier Type	bundle ID
Identifier	com.microsoft.wdav.epsext
Allowed	True
Authorization	Allow
Static Code	False
Code Requirement	identifier "com.microsoft.dlp.daemon" and anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] /* exists / and certificate leaf[field.1.2.840.113635.100.6.1.13] / exists */ and certificate leaf[subject.OU] = UBF8T346G9
Identifier Type	bundle ID
Identifier	com.microsoft.dlp.daemon

System Extensions

Setting	Value
Team Identifier	UBF8T346G9
Allowed System Extensions	com.microsoft.wdav.epsext, com.microsoft.wdav.netext

Notifications

Setting	Value
Show In Notification Center	True
Notifications Enabled	True
Show In Lock Screen	False
Bundle Identifier	com.microsoft.wdav.tray
Badges Enabled	True
Alert Type	Temporary Banner
Sounds Enabled	True
Critical Alert Enabled	False

Web Content Filter

Setting	Value
Filter Data Provider Bundle Identifier	com.microsoft.wdav.netext
User Defined Name	Microsoft Defender Content Filter
Filter Grade	inspector
Filter Sockets	True
Filter Packets	False
Plugin Bundle ID	com.microsoft.wdav
Filter Data Provider Designated Requirement	identifier "com.microsoft.wdav.netext" and anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] /* exists / and certificate leaf[field.1.2.840.113635.100.6.1.13] / exists */ and certificate leaf[subject.OU] = UBF8T346G9
Organization	JAMF Software