Skip to content

README.md

Latest commit

 

History

History
42 lines (31 loc) · 1.24 KB

README.md

File metadata and controls

42 lines (31 loc) · 1.24 KB
Raw

Device Control for macOS Deployment

demo.mobileconfig

An example mobileconfig file demonstrating how to deploy a DC policy.

DC_in_dlp

The v2 Device Control implementation is gated behind a feature flag while in preview. The feature will be disabled unless set in the MDE settings (com.microsoft.wdav preference domain):

    <key>dlp</key>
    <dict>
        <key>features</key>
        <dict>
            <key>name</key>
            <string>DC_in_dlp</string>
            <key>state</key>
            <string>enabled</string>
        </dict>
    </dict>

Note: This will not be needed after public release.

Device Control policy

The v2 Device Control policy is now set via the deviceControl/policy key. The policy is no longer directly embedded within the MDE settings, but instead indirectly stored as a string.

    <key>deviceControl</key>
    <dict>
        <key>policy</key>
        <string>
            policy text here
        </string>
    </dict>

schema.json

The mdatp-xplat repo's schema.json has been updated to expose both the deviceControl/policy and dlp/features configurations.