Skip to content

Instantly share code, notes, and snippets.

@lorenzodifuccia
Last active September 29, 2025 20:22
Show Gist options
  • Select an option

  • Save lorenzodifuccia/8d5e8b83836577c29d5335b8d2fb5de6 to your computer and use it in GitHub Desktop.

Select an option

Save lorenzodifuccia/8d5e8b83836577c29d5335b8d2fb5de6 to your computer and use it in GitHub Desktop.
Disable Microsoft Defender ATP on MacOS
launchctl unload /Library/LaunchAgents/com.microsoft.wdav.tray.plist
sudo launchctl unload /Library/LaunchDaemons/com.microsoft.fresno.plist
sudo launchctl unload /Library/LaunchDaemons/com.tanium.taniumclient.plist
@heliohe02
Copy link

Hi. How can I do the same to disable cleanmymac app ? regards. @lorenzodifuccia

@tbarbette
Copy link

zsh: killed     launchctl unload /Library/LaunchAgents/com.microsoft.wdav.tray.plist
Unload failed: 5: Input/output error
Try running `launchctl bootout` as root for richer errors.

Does not work anymore it seems

@lorenzodifuccia
Copy link
Author

sudo mdatp config tamper-protection enforcement-level --value disabled

then

sudo mdatp config tamper-protection enforcement-level --value block

@bcre3306
Copy link

sudo mdatp config tamper-protection enforcement-level --value disabled

then

sudo mdatp config tamper-protection enforcement-level --value block

Doesn't work. Gives the following error:
This setting is managed by your organization

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment