If you want to enforce update ring or change behavior this must be configured.
I recommend the following configurations to be deployed before deploying the Defender ATP application to our machines: To make MDATP work as we want it to we need to have some additional settings in addition to the ones in the on-boarding package. Required configuration for MDATP to work on macOS Catalina
But before we go into the details of this let us have a look of what else is needed. We have kext.xml which is for configuring kernel extensions on your macOS devices, and the WindowsDefenderATPOnboarding.xml that contains your tenant on-boarding information. Delete the jamf folder as we are using Intune to do this. In this folder you find a folder for Jamf and a folder for Intune. You will now get a file called WindowsDefenderATPOnboardingPackage.zip in your Downloads folder.
