Windows-itpro-docs: Command shown is incorrect

Created on 6 Nov 2019 · 9Comments · Source: MicrosoftDocs/windows-itpro-docs

The command to enable on a single machine is wrong, it should be

mdatp --edr --earlyPreview true

Document details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: c91a5cfb-d32d-3864-c1d5-aec39558f66f
Version Independent ID: dbd2647e-88a6-ff22-4eab-ef628ac2e605
Content: Microsoft Defender ATP for Mac
Content Source: windows/security/threat-protection/microsoft-defender-atp/endpoint-detection-response-mac-preview.md
Product: w10
Technology: windows
GitHub Login: @Dansimp
Microsoft Alias: dansimp

Source

nzrb

👍3

Most helpful comment

On November 18, a new MDATP build dropped on the AutoUpdate Inside channel, new version is 10.78.78.
In this version the command shown in the documentation is working correctly.
When running mdatp --help, the command shows the new syntax as well in this version. Old syntax is still accepted as well.
mdatp --edr --early-preview
It doesn't appear to have anything to do with the macOS version we're on then.

So I guess when this version or newer comes to the regular AutoUpdate track, the documentation will be on track again :-)

codeskipper on 20 Nov 2019

👍2 🎉1

All 9 comments

I've submitted pull request #5378 to resolve this.

RyanMorash on 8 Nov 2019

👍1

The PR has been rejected. Please see the closing comment in PR #5378 .

illfated on 12 Nov 2019

Closing as the referenced PR has been rejected by the document author:

levinec wrote:

According to the PM, this change is not necessary. "There is no need. We added backward supportability so that both modes work. Changing doc at this point would probably cause more confusion since not all customers have the same version."

_(via https://github.com/MicrosoftDocs/windows-itpro-docs/pull/5378#issuecomment-552580165)_

e0i on 13 Nov 2019

Not sure what you meant with backwards compatibility, maybe you are referring to a version not yet released?

When following the instructions above, I verified I'm running version 100.72.15 as it says, running the command as it says in the instructions

mdatp --edr --early-preview true
results in
Failed: unrecognised option '--early-preview'

When running
mdatp --edr --earlyPreview true
it asks for my admin credentials, and then the change to preview mode is made as expected

As it stands, the instructions do not apply to the available version

codeskipper on 13 Nov 2019

Codes Skipper is correct mdatp --edr --early-preview true does not work on High Sierra 10.13.6. mdatp --edr --earlyPreview true does work correctly though.