When deploying the Malwarebytes Endpoint Agent on macOS Catalina 10.15 or macOS Big Sur 11.x, Full Disk Access must be manually granted on the endpoint so Malwarebytes can scan all disk locations for threats. Due to Apple’s Transparency, Consent, and Control (TCC) feature, Malwarebytes cannot access sensitive folders for potential threats until Full Disk Access is granted.
Create a Privacy Preferences Policy Control profile (PPPCP) to give Full Disk Access. Deploy the PPPCP using a User Approved Mobile Device Management (UAMDM).
Upload and deploy PPPCP using UAMDM
- Download the attached file for your macOS Catalina (10.15) and macOS Big Sur (11.x) endpoints:
- Malwarebytes_Protection_profile_10_15.mobileconfig
- Upload the file to your UAMDM.
- Save and deploy your PPPCP by UAMDM as a device profile.