Due to Apple's Transparency, Consent, and Control (TCC) feature, the Endpoint Agent requires Full Disk Access (FDA) in order to scan all disk locations for threats. FDA must be granted on endpoints running the following versions of macOS:
- Sonoma 14
- Ventura 13
- Monterey 12
- Big Sur 11
- Catalina 10.15
This article details how to manually provide FDA to the endpoint agent on macOS devices.
Grant FDA on macOS Sonoma 14 and Ventura 13
Manually grant FDA on endpoints running macOS Sonoma 14 and Ventura 13.
- On the affected Mac device, you see an alert indicator
on the menu bar icon.
- Click on the icon to open a context menu. Click on Current Issues.
- The Full Disk Access requirement window displays.
- Click Open preferences.
- The System Settings > Privacy & Security > Full Disk Access window opens.
- Toggle on Full Disk Access for Malwarebytes Protection and Malwarebytes Endpoint Agent in the list.
- Enter the user's password.
Grant FDA on macOS Monterey 12 and below
Manually grant FDA on endpoints running macOS Monterey 12 and below.
-
- On the affected Mac device, you see an alert indicator
on the menu bar icon.
- Click on the icon to open a context menu. Click on Current Issues.
- The Full Disk Access requirement window displays.
- Click the button to Open System Preferences.
- Navigate to Security & Privacy, then click the Privacy tab.
- Scroll down to find Full Disk Access and select it.
- Click the lock icon at the bottom-left corner of the windows to make Privacy changes.
- You are prompted to enter your login Password to allow changes to your Security & Privacy.
- Click Unlock.
- Toggle on Full Disk Access for Malwarebytes Protection and Malwarebytes Endpoint Agent in the list.
- Click the lock icon at the bottom-left corner to prevent further settings changes.
- On the affected Mac device, you see an alert indicator
For instructions on granting FDA with a User Approved Mobile Device Management (UAMDM), see Grant Full Disk Access for Mac endpoints using UAMDM.