Feb 12, 2007 MacBook Pro 15 Inch 2.16Ghz C2D, Mac OS X (10.4.8) The Microsoft AU Daemon is a small piece of software that periodically checks Microsoft's servers to see if there are updates to Microsoft Office. Sep 27, 2016 Security prompts for Lync for Mac 2011 and Office for Mac after you upgrade to macOS 10.12 Sierra. Content provided by Microsoft. The Microsoft AU Daemon program is the background process that checks for updates when an Office app is opened. The Microsoft AutoUpdate program is the UI that is displayed when updates are found.
-->Applies to:
Collecting diagnostic information
If you can reproduce a problem, please increase the logging level, run the system for some time, and restore the logging level to the default.
Increase logging level:
Reproduce the problem
Run
sudo mdatp --diagnostic --create
to backup Microsoft Defender ATP's logs. The files will be stored inside of a .zip archive. This command will also print out the file path to the backup after the operation succeeds.Restore logging level:
Logging installation issues
If an error occurs during installation, the installer will only report a general failure.
The detailed log will be saved to /Library/Logs/Microsoft/mdatp/install.log
. If you experience issues during installation, send us this file so we can help diagnose the cause.
Uninstalling
There are several ways to uninstall Microsoft Defender ATP for Mac. Please note that while centrally managed uninstall is available on JAMF, it is not yet available for Microsoft Intune.
Interactive uninstallation
- Open Finder > Applications. Right click on Microsoft Defender ATP > Move to Trash.
From the command line
sudo rm -rf '/Applications/Microsoft Defender ATP.app'
sudo rm -rf '/Library/Application Support/Microsoft/Defender/'
Configuring from the command line
Important tasks, such as controlling product settings and triggering on-demand scans, can be done from the command line:
Group | Scenario | Command |
---|---|---|
Configuration | Turn on/off real-time protection | mdatp --config realTimeProtectionEnabled [true/false] |
Configuration | Turn on/off cloud protection | mdatp --config cloudEnabled [true/false] |
Configuration | Turn on/off product diagnostics | mdatp --config cloudDiagnosticEnabled [true/false] |
Configuration | Turn on/off automatic sample submission | mdatp --config cloudAutomaticSampleSubmission [true/false] |
Configuration | Turn on PUA protection | mdatp --threat --type-handling potentially_unwanted_application block |
Configuration | Turn off PUA protection | mdatp --threat --type-handling potentially_unwanted_application off |
Configuration | Turn on audit mode for PUA protection | mdatp --threat --type-handling potentially_unwanted_application audit |
Diagnostics | Change the log level | mdatp --log-level [error/warning/info/verbose] |
Diagnostics | Generate diagnostic logs | mdatp --diagnostic --create |
Health | Check the product's health | mdatp --health |
Protection | Scan a path | mdatp --scan --path [path] |
Protection | Do a quick scan | mdatp --scan --quick |
Protection | Do a full scan | mdatp --scan --full |
Protection | Cancel an ongoing on-demand scan | mdatp --scan --cancel |
Protection | Request a security intelligence update | mdatp --definition-update |
EDR | Turn on/off EDR preview for Mac | mdatp --edr --early-preview [true/false] OR mdatp --edr --earlyPreview [true/false] for versions earlier than 100.78.0 |
EDR | Add group tag to machine. EDR tags are used for managing machine groups. For more information, please visit https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/machine-groups | mdatp --edr --set-tag GROUP [name] |
EDR | Remove group tag from machine | mdatp --edr --remove-tag [name] |
Client Microsoft Defender ATP quarantine directory
/Library/Application Support/Microsoft/Defender/quarantine/
contains the files quarantined by mdatp
. The files are named after the threat trackingId. The current trackingIds is shown with mdatp --threat --list --pretty
.
Microsoft Defender ATP portal information
This blog provides detailed guidance on what to expect in Microsoft Defender ATP Security Center.
Latest Updates!
Site Navigation
Download updates from Office Mac or use AutoUpdate under Help in the menu bar. More Info on updates
Support our site SIGNUP FOR HOSTMONSTER.COM
Support our Site
Office365 Home Premium 1YR SubscriptionMicrosoft Database Daemon
- Do Word, Excel and PowerPoint use daemon?
Also see Microsoft AU daemon
Notifications are now called Reminders starting with Entourage 2008.
Recommended:
Before Installing any Office update or use backup software: Quit any applications that are running, including virus-protection applications, all Office applications, Microsoft Messenger for Mac, and Office Notifications (Microsoft Database daemon) See how to quit daemon.
New in Office 2004:
The daemon is also used to run the option in the the Database Utility to 'Verify Automatically in Background'. If the daemon is turned off, 'Verify Automatically in Background' will not take place.
Spotlight will index any cache files the Entourage daemon has created even if the daemon is not launched, but no new cache files will be created until the daemon is launched again. If the Microsoft Sync daemon never launches, there's no way for Entourage to sync data with Sync Services. The preferences in Entourage for Sync Services basically control 1) if this daemon app is launched and 2) where it should sync data to-from.
New in Office 2008:
Starting with Entourage 2008, Office Notifications are now called Office Reminders. It's not simply a name change. The Microsoft Database daemon no longer quits Reminders in Entourage 2008.
Before 2008, the daemon owned telling the reminders app that there were reminders. With 2008, the daemon only owns launching the reminders app and the reminders app asks the daemon about what to show.
1) What is a daemon?
A daemon is a networking program that performs a housekeeping or maintenance utility function without being called by the user. A daemon sits in the background and is activated only when needed, for example, to correct an error from which another program cannot recover.
2) What is the Microsoft Database Daemon?
The Microsoft Database Daemon allows the Reminder to work even if all MS applications are closed. The daemon is actually used all the time to access the Database. Even Word uses it. This is why you need to Quit Notifications and/or the Microsoft Database daemon when you install MS updates. It could also interfere with backup applications.
3) Should the database daemon show up in my startup items?
If you have Office Notifications/Reminders enabled you will see the database daemon in your startup items. You should only have one. If you have more than one, delete them all and let one of the Office applications create a new one. Multiple daemons in startup can cause crashes.
4) Does switching back and forth between Entourage X and Entourage 2004 create multiple daemons?
Yes, you should quit Notifications and/or the daemon before launching another version.
You can open both Entourage 2004 and Entourage 2008 as well as any Office 2004 and 2008 application at the same time, but it's not recommended to actually use both versions of Entourage at the same time.
5) I recognize that Microsoft Database daemon is used by Office Notifications. What do Word, Excel and PowerPoint use it for, if anything?
Word, Excel, and PowerPoint have features that can trigger Office notifications. The 'flag for follow-up' button on Word's standard toolbar is one such feature. If you don't use these, you can turn Notifications off and delete it from the login items.
New to Entourage 2004: Spotlight will index any cache files the Entourage daemon has created even if the daemon is not launched, but no new cache files will be created until the daemon is launched again. If the Microsoft Sync daemon never launches, there's no way for Entourage to sync data with Sync Services.
New to Entourage 2008: The Microsoft Database daemon no longer quits Office Reminders.
6) Can I delete the Microsoft Database Daemon in startup items?
Yes, if you don't use Notifications and/or Reminders you can delete the daemon. However, Spotlight won't update any cached files if it's turned off.
7) What do I do if I have more than one Microsoft Database daemon?
If you see more than one Microsoft Database daemon delete them all and let Entourage recreate a new one.
Panther->System Preferences->Users
Tiger->System Preferences->Accounts
8) How to quit Notifications/Reminders
Note: Just quitting Entourage will not quit the daemon and/or Notifications/Reminders. Notifications are now called Reminders in Office 2008.
Microsoft Au Daemon Rosetta
Recommended for Office 2008 users: Read article Quit all Microsoft applications before backing up
Options to Quit:
How to quit Office Reminders and the Microsoft Database daemon in Entourage 2008:
- If the application Reminders is open, select to quit from the Dock or when it's active in the Menu bar, select quit.
- Open Activity Monitor in your Utilties folder, sort by 'microsoft', select Microsoft Office Reminders, double click to open window and select quit. (just do a normal quit, not a forced quit)
- Easiest way.....Use this script to quit (download script: quit all Microsoft applications) or create a script just to delete daemon and reminders:
What Is Microsoft Au Daemon On Mac
How to quit Office Notifications and the Microsoft Database daemon for Entourage 2004 and Entourage X.
- In Entourage Menu select 'Turn off Office Notifications'
- Open 'Activity Monitor' (older OS called it Process Viewer), look for 'database daemon', double click to open window and select quit.(just do a normal quit, not a forced quit).
- Easiest way.....use this script: (or download script here)
Microsoft Au Daemon For The First Time
Save as either
- Application (to use script from desktop)
- Complied (to use from Script Menu)
I suggest placing the script in the Script Menu available from Apple for easy access.
To install Script Menu:
Open the AppleScript utility located in Applications/AppleScript.
Select the 'Show Script Menu in menu bar' checkbox.