I have already uninstalled Microsoft Defender following Microsoft instructions:

Interactive uninstallation

Open Finder > Applications. Right click on Microsoft Defender for Endpoint > Move to Trash.

Defender is not in my Applications folder anymore.

However, System Settings > Network > Filters > Filters & Proxies still show Microsoft Defender, and it is enabled but with a yellow dot.

enter image description here

This filter does not have enabled the option to disable.

Any suggestion how to get rid of this filter?

Update: after restarting the machine, the icon is gone, but filter/proxy still shows up:

enter image description here

  • Did you try the command line solution? Who installed this in the first place, you or a company/organisation? It seems an unlikely app to be self-installed.
    – Tetsujin
    Nov 11 at 9:18
  • @Tetsujin I tried, but the /Library/Application Support/Microsoft/Defender does not exist
    – kiewic
    Nov 11 at 19:19
  • You didn't answer the second part, which is important - is this a managed machine, or your own personal? I'm really wondering how a corporate endpoint security got onto a personal Mac.
    – Tetsujin
    Nov 11 at 19:21
  • @Tetsujin, sorry, this is my personal computer, but I used it for work at some point, so it was managed by my employer
    – kiewic
    Nov 12 at 9:11
  • Check if there's an MDM. Simply go to “System Preferences”. If you don’t see a section as “Profiles” or “Profiles & Device Management”, then you don’t have any MDM on your Mac. On the other hand, click on “Profiles” or “Profiles & Device Management”. When it’s open, if you don’t see any profiles listed, then it means you don’t have any MDM profiles or it has been removed. Otherwise, you may have an MDM on your Mac. Also look in Activity monitor to see if a process called 'mdmclient' running.
    – Tetsujin
    Nov 12 at 10:24


You must log in to answer this question.

Browse other questions tagged .