How to Fix Windows Defender High CPU & Memory Usage on macOS
Question details
The wdavdaemon_enterprise process in Windows Defender for Endpoint is consuming excessive CPU and memory on managed macOS devices.
- Product
- Microsoft Defender for Endpoint
- Device & OS
- macOS 13.0.1
- Scenario
- Attempting to use a managed Mac efficiently without system slowdowns caused by antivirus background processes.
- Observed behavior
- The wdavdaemon_enterprise process uses massive system resources. Disabling real-time protection fails due to organizational policies, and force-quitting provides only temporary relief as the process restarts almost immediately.
Before attempting any fixes, save all open work and verify if your Mac is managed by your organization, as administrator privileges and IT approval are required to adjust enterprise security settings.
Contact Your Security Administrator for Managed Devices
Since the device is managed by an organization, local workarounds are blocked. Your IT team must adjust the Defender configuration remotely.
On organization-managed Macs, security policies strictly enforce real-time protection. Attempts to disable it via terminal commands (such as 'mdatp config') will be actively blocked by the Mobile Device Management (MDM) profile.
Note down your current macOS version (e.g., macOS 13.0.1) and the Microsoft Defender for Endpoint version currently installed.
Take screenshots of the Activity Monitor showing the 'wdavdaemon_enterprise' process resource usage to help your IT department understand the severity of the memory and CPU leak.
Contact your IT department or security administrator with the gathered details. They can whitelist certain processes, adjust scan schedules, or escalate the issue to Microsoft Support for a patch.
Force-Quit the Process via Activity Monitor (Temporary Workaround)
If you need immediate temporary relief to save your work or close applications smoothly, you can force-quit the process, though it will restart automatically.
Switch to WPS Office for a Lightweight, Fast Experience on Mac
While dealing with heavy background processes and system slowdowns, the last thing you need is resource-heavy office software. WPS Office is a lightweight, highly compatible alternative to Microsoft Office that runs seamlessly on macOS without draining your CPU.
- 1. Download and install: Get the official WPS Office for Mac installer from the official website and install it on your device.
- 2. Open your files: Drag and drop your existing Microsoft Word, Excel, or PowerPoint files directly into the WPS Office application.
- 3. Enjoy fast performance: Experience smooth document editing, fast loading times, and low resource consumption even on Macs experiencing background CPU spikes.
Frequently Asked Questions
Why does the wdavdaemon_enterprise process use so much CPU on my Mac?
The wdavdaemon_enterprise process is the core background engine for Microsoft Defender for Endpoint on macOS. High CPU usage usually occurs during deep system scans, software conflicts, or when processing complex enterprise security policies pushed by your organization.
Can I disable real-time protection in Microsoft Defender on Mac?
If your Mac is managed by an organization, security policies typically prevent end-users from disabling real-time protection. Terminal commands like 'mdatp config real-time-protection' will be blocked and return an error stating the configuration cannot be updated.
Will reinstalling Microsoft Defender fix the memory leak?
Reinstalling might help if the local installation is corrupted. However, for managed enterprise devices, the issue is often tied to bugs in specific versions (like macOS 13.0.1 compatibility) or organizational scan policies. Contacting your IT admin to update or reconfigure the software is the best approach.
