I have a macOS device which has a "Secure Home Folders in macOS" security recommendation in Defender for Endpoint. We have already applied the recommended remediation (pictured) and the recommendation still shows. As I go to report an inaccuracy I see, for the first time, an "insight" which says the attack surface reduction (ASR) rule for this device is undefined.
We manage all our devices using Intune, and set ASR rules for Windows devices using an attack surface reduction policy. When I go to create a ASR policy for macOS, the option is not present.
Official Microsoft documentation found here states
The available profiles for attack surface reduction policy depend on the platform you select.
It also explicitly gives a section for Windows
Platform: Windows:
Profiles for this platform are supported on Windows devices enrolled with Intune.
Attack Surface Reduction Rules
There are no other platforms listed on that page of the manual.
How can I manage attack surface reduction rules on macOS using Intune?
