Note that while centrally managed uninstall is available on JAMF, it is not yet available for Microsoft Intune. There are several ways to uninstall Microsoft Defender for Endpoint on macOS. If you experience issues during installation, send us this file so we can help diagnose the cause. The detailed log will be saved to /Library/Logs/Microsoft/mdatp/install.log. If an error occurs during installation, the installer will only report a general failure. Restore logging level: mdatp log level set -level info sudo mdatp diagnostic createĭiagnostic file created: '/Library/Application Support/Microsoft/Defender/wdavdiag/932e68a8-8f2e-4ad0-a7f2-65eb97c0de01.zip' To change the directory where diagnostic logs are saved, pass -path to the below command, replacing with the desired directory.
By default, diagnostic logs are saved to /Library/Application Support/Microsoft/Defender/wdavdiag/.
