FeedDiscussion
In case you are prevented from unloading it, make sure anti-tampering is disabled:
mdatp config tamper-protection enforcement-level --value disabled
I think all this does is kill the tray app, the daemon is still running. I'm sure people have this installed by Intune, you can remove it for an hour, but it will get re-installed. This is the command: sudo '/Library/application Support/Microsoft/Defender/uninstall/uninstall'
zilboris
This does not seem to do anything in Mac OS 26.6.2
admin@macbook ~ % sudo launchctl unload /Library/LaunchAgents/com.microsoft.wdav.tray.plist zsh: killed sudo launchctl unload /Library/LaunchAgents/com.microsoft.wdav.tray.plist admin@macbook ~ %
Defender still running and can't be killed in Activity Monitor