An MDM (mobile device management) tool can install Huntress and give its approvals for you, so nobody has to select anything on their Mac. For one or two Macs without an MDM, see Install Huntress on a Mac.
¶ Before you begin
- An admin login to your MDM.
- Macs enrolled as company-managed devices. Huntress's profile can't be applied on a BYOD (User Enrollment) Mac.
- A macOS version Huntress supports. Huntress lists macOS 13 through 26. If you have a newer version, ask us first.
- Huntress's profile, downloaded to your computer. It pre-approves the system extension, the network filter and Full Disk Access. Don't edit it.
- Your company's two keys. If you ordered online, they're in
INSTALL-MAC.mdin your shared folder. Otherwise, email [email protected].
¶ The two parts
Every MDM below does the same two things, in this order. The profile must reach a Mac before the install runs, or that Mac's user gets the prompts.
- Deploy Huntress's profile to your Macs.
- Run this script on those Macs, with your keys in place of the capital letters. It runs as root, so it has no
sudo.
#!/bin/bash
curl -fsSL https://huntress.io/script/darwin/ACCOUNT_KEY -o /tmp/huntress-install.sh && bash /tmp/huntress-install.sh -a ACCOUNT_KEY -o ORGANIZATION_KEY --install_system_extension
Please keep the filled-in script inside your company. It holds your keys.
Try it on one Mac first, then assign it to the rest. A Mac that already has Huntress doesn't need the script. Assign it the profile, then check it.
¶ Mosyle
- In Mosyle, go to Certificates and Custom Profiles and add a new profile.
- Upload Huntress's profile, assign it to your Macs, and save.
- Go to Custom Commands and add a new command.
- Paste the script, assign it to the same Macs, and save.
Huntress also publishes a Mosyle version of its script. See Install via Mosyle.
¶ Jamf Pro
- Go to Computers > Configuration Profiles, then upload Huntress's profile.
- Set Level to Computer Level and Distribution Method to Install Automatically.
- On the Scope tab, add your Macs, then save.
- Go to Settings > Computer Management > Scripts, add a script, and paste the script on the Script tab.
- Go to Computers > Policies and add a policy.
- Set the trigger to Recurring Check-in and Execution Frequency to Once per computer. Recurring Check-in gives the profile time to arrive first.
- Under Scripts, add your script. On the Scope tab, add the same Macs, then save.
- To see the result, open the policy's Logs. Anything other than Completed has details you can open.
See Install via Jamf Pro.
¶ Microsoft Intune
- In the Intune admin center, go to Devices > macOS > Configuration and create a policy with the Custom template.
- Enter a name and select Next.
- Set Deployment channel to Device channel and upload Huntress's profile. You can't change the channel after you save.
- Assign it to your Macs, then select Create. Its status can take up to 20 minutes to update, and restarting the Mac can speed that up.
- Go to Devices > macOS > Scripts and select Add.
- Upload the script as a
.shfile. - Set "Run script as signed-in user" to No, so it runs as root.
- Leave Script frequency at Not configured, so it runs once.
- Assign it to the same Macs, then select Add.
See Install via Intune for macOS.
¶ Kandji (now Iru)
Huntress has no guide for Kandji, so these steps follow Huntress's general MDM steps and Kandji's own.
- Go to Library > Add New, select Custom Profile, then Add & Configure.
- Enter a name, select your Blueprint, upload Huntress's profile, and save.
- Go to Library > Add New, select Custom Script, then Add & Configure.
- Enter a name, select the same Blueprint, and paste the script.
- Set it to run once per device, then save.
¶ JumpCloud
Huntress has no guide for JumpCloud, so these steps follow Huntress's general MDM steps and JumpCloud's own.
- Go to Policy Management, add a policy, and select the macOS tab.
- Select MDM Custom Configuration Profile.
- Under Settings, upload Huntress's profile.
- On the Device Groups tab, select your Macs' group, then save.
- Go to Commands and add a command for Mac, running as root.
- Paste the script, leaving out the first line.
- On the Device Groups tab, select the same group, save, then run the command.
¶ Check a Mac
To confirm the profile arrived, go to System Settings, under General > Device Management, and look for Huntress.
To check the agent, run this in Terminal on the Mac:
sudo /Applications/Huntress.app/Contents/MacOS/Huntress status
The output should show the extension installed, EDR enabled, and Full Disk Access true for both the agent and the extension.
System Settings can show Full Disk Access as off for Huntress even when the profile has turned it on, because the profile overrides the switch. Go by the status output.
¶ Get help
Menu names change, so if yours differ, go by your MDM's own documentation. We're glad to do this with you. Email [email protected] or call (206) 593-8072, Mon–Fri 8am–6pm PT.
¶ Sources
- Instructions for the MDM configuration for macOS, Huntress Support
- Install via Mosyle, Huntress Support
- Install via Jamf Pro, Huntress Support
- Install via Intune for macOS, Huntress Support
- Install the Huntress agent for macOS: critical steps, Huntress Support
- Huntress macOS deployment scripts, Huntress on GitHub
- Custom profiles overview, Kandji
- Create a macOS MDM custom configuration profile policy, JumpCloud
- Add custom settings to macOS devices, Microsoft Learn
- Run shell scripts on macOS, Microsoft Learn
Last reviewed: November 2026