diff --git a/images/macos/provision/configuration/configure-tccdb-macos11.sh b/images/macos/provision/configuration/configure-tccdb-macos11.sh
index 3448cd2ee..ad2e186b0 100644
--- a/images/macos/provision/configuration/configure-tccdb-macos11.sh
+++ b/images/macos/provision/configuration/configure-tccdb-macos11.sh
@@ -16,6 +16,9 @@ systemValuesArray=(
     "'kTCCServiceAccessibility','/bin/bash',1,2,0,1,NULL,NULL,NULL,'UNUSED',NULL,0,1583997993"
     "'kTCCServiceMicrophone','/usr/local/opt/runner/runprovisioner.sh',1,2,0,1,NULL,NULL,NULL,'UNUSED',NULL,NULL,1576661342"
     "'kTCCServiceScreenCapture','/bin/bash',1,2,0,1,NULL,NULL,NULL,'UNUSED',NULL,0,1599831148"
+    # Allow Full Disk Access for "Microsoft Defender for macOS" to bypass installation on-flight
+    "'kTCCServiceSystemPolicyAllFiles','com.microsoft.wdav',0,2,4,1,NULL,NULL,NULL,'UNUSED',NULL,0,1643970979"
+    "'kTCCServiceSystemPolicyAllFiles','com.microsoft.wdav.epsext',0,2,4,1,NULL,NULL,NULL,'UNUSED',NULL,0,1643970979"
 )
 for values in "${systemValuesArray[@]}"; do
     configure_system_tccdb "$values"