Rediger

macOS Device Control policies frequently asked questions (FAQ)

  • Gjelder for: Microsoft Defender for Endpoint Plan 1, Microsoft Defender for Endpoint Plan 2, Microsoft Defender for Business

This article provides answers to frequently asked questions about Device Control capabilities in Microsoft Defender for Endpoint.

Questions | Answers

How do I know whether the machine is Device Control enabled, and what is the Default Enforcement?

Answer: Run mdatp device-control policy preferences list to see all the iOS policies on this machine:

Shows how to run mdatp device-control policy preferences list to see if a device is Device Control enabled.

How do I know if the policy is delivered to the client machine?

Answer: Run mdatp device-control policy rules list to see all the iOS policies on this machine:

Shows how to run mdatp device-control policy rules list to determine whether a policy has been configured on the endpoint.

Answer 2: Run mdatp device-control policy groups list to see all the iOS groups on this machine:

Shows how to see all of the iOS groups on the device.

See also

  • Last updated on