Microsoft says Intune has day zero support for Apple OS 27, with the settings catalog updated for both declarative device management (DDM) and classic MDM.
The update covers allow/deny app launch rules on supervised iOS/iPadOS, Apple TV, Vision Pro and Mac binaries, organization-suggested privacy consent defaults, Apple Intelligence controls, accessibility preferences, Safari policy, Siri controls, Content Caching, DNS proxy and web content filter network extensions, and the macOS login window.
Few highlights:
- Allow/deny rules now control which apps launch on supervised iPhone, iPad, Apple TV, and Vision Pro, plus which binaries run on supervised Macs. Useful for lockdown baselines on the new OS.
- One consolidated consent prompt for org-suggested privacy defaults (camera, mic, Bluetooth, location, local network, dictation, accessibility). MSPs should expect fewer sequential prompts on enrollment.
- Apple Intelligence is centrally controllable: Visual Intelligence, Writing Tools, Genmoji, Image Playground, Mail/Notes/Safari features, plus on-device dictation and translation requirements.
- Network side: DNS proxy and plug-in web content filter network extensions are manageable via DDM, and macOS Content Caching can be configured to cut internet bandwidth.
- App protection heads-up: the Screen capture policy setting now also gates Siri onscreen awareness. Set Screen capture to Block to stop Siri from accessing work/school data (Allow is the default). Requires Intune App SDK for iOS 21.8.0 or later.
- New enrollment policies experience adds Skip Keys for Liquid Glass and Accessibility Appearance; managed Setup Assistant panes are listed in the Setup Assistant screen reference.
To read more, follow the link to the Microsoft blog below.
Source: r/Intune · by /u/TimmyIT