'%3e%3cpath%20d='M8%200C12.4183%200%2016%203.58172%2016%208C16%2012.4183%2012.4183%2016%208%2016C3.58172%2016%200%2012.4183%200%208C0%203.58172%203.58172%200%208%200ZM11.6162%204.38379C11.2257%203.99337%2010.5927%203.99338%2010.2021%204.38379L8%206.58594L5.79785%204.38379C5.40732%203.99334%204.77429%203.99329%204.38379%204.38379C3.99331%204.77429%203.99335%205.40733%204.38379%205.79785L6.58594%208L4.38379%2010.2021C3.99348%2010.5927%203.99341%2011.2257%204.38379%2011.6162C4.77426%2012.0066%205.40734%2012.0065%205.79785%2011.6162L8%209.41406L10.2021%2011.6162C10.5927%2012.0066%2011.2257%2012.0067%2011.6162%2011.6162C12.0067%2011.2257%2012.0066%2010.5927%2011.6162%2010.2021L9.41406%208L11.6162%205.79785C12.0066%205.40735%2012.0066%204.77429%2011.6162%204.38379Z'%20fill='%23080E17'%20fill-opacity='0.46'/%3e%3c/g%3e%3cdefs%3e%3cclipPath%20id='clip0_3761_713'%3e%3crect%20width='16'%20height='16'%20fill='white'/%3e%3c/clipPath%3e%3c/defs%3e%3c/svg%3e)
Fix Microsoft Defender for macOS Full Disk Access Configuration Unavailable
Question details
The user needs to resolve an issue where Microsoft Defender for Endpoint on macOS displays a Configuration not available status for Full Disk Access.
- Product
- Microsoft Defender for Endpoint
- Device & OS
- macOS
- Scenario
- Deploying and managing Microsoft Defender security configurations via Microsoft Intune.
- Observed behavior
- The Defender configuration status in the management portal shows Configuration not available instead of confirming that Full Disk Access is successfully granted.
Ensure you have administrator access to the Microsoft Intune admin center and that the target macOS device is powered on and connected to the internet.
Verify Intune Connection and Device Onboarding
Use this solution to ensure that the foundational connection between Microsoft Intune and Defender for Endpoint is active and the Mac is properly enrolled.
If the integration between Intune and Defender is broken or the device hasn't fully onboarded, configuration policies will fail to apply and show as unavailable.
Sign in to the Microsoft Intune admin center, navigate to Endpoint security, and select Microsoft Defender for Endpoint. Verify that the connection status shows as active.
Go to the Devices section in Intune and locate the affected macOS device to confirm it is successfully enrolled.
Check the Microsoft Defender security center to ensure the macOS device appears in the device inventory, indicating a successful onboarding process.
Configure macOS System Extensions and Full Disk Access Profiles
Use this method to correctly configure the required macOS configuration profiles in Intune.
Sync Device and Review Deployment Errors
Force a device sync and check for policy conflicts to resolve delayed or stuck deployments.
Need a Lightweight Office Suite for Your Mac? Try WPS Office
While troubleshooting complex Microsoft Defender and Intune policies on your Mac, you might be looking for a fast, secure, and hassle-free productivity suite. WPS Office is a free, lightweight alternative that offers seamless compatibility with major document formats.
- 1. Download the Installer: Visit the official WPS Office website and download the macOS version.
- 2. Install on Your Mac: Open the downloaded file and follow the on-screen instructions to install the suite.
- 3. Open Your Documents: Launch WPS Office and instantly open your existing Microsoft Office files without formatting loss.
Frequently Asked Questions
Why does Intune show configuration unavailable for Defender on macOS?
This error typically occurs due to an incomplete onboarding process, delays in device synchronization, or missing configuration profiles granting System Extensions and Full Disk Access in Intune.
How long does it take for Intune policies to apply on macOS?
After initiating a manual sync, policies usually apply within a few minutes. However, depending on network connectivity and Microsoft Intune service loads, it can sometimes take up to 8 hours to fully reflect in the portal.
Can I manually grant Full Disk Access to Defender on a Mac?
Yes, for local troubleshooting you can navigate to System Settings > Privacy & Security > Full Disk Access on the Mac and manually toggle Microsoft Defender. However, for enterprise environments, this should be managed and deployed via Intune profiles.
