macOS overview

Developed in collaboration with IntuneMacAdmins.

The baseline has been designed and tested on the following scenario.

Intended use-case

Device

macOS 14.6 or above on Apple Silicon
Enrolled into Apple Business Manager
ADE deployment with the following configured:
- Management settings:
  - Enroll with user affinity
  - Setup Assistant with modern authentication
  - Await final configuration: Yes
  - Locked configuration: Yes
- Setup Assistant:
  - FileVault: Show
  - Touch ID: Show
M365 Apps deployed via VPP

User

Cloud-only or hybrid identity with Entra ID as IdP
MFA configured via Conditional Access

Licensing

Either:

M365 Business Premium, M365 E5/A5, or M365 E3/A3 + MDE P1/P2

or:

Entra ID P1 or P2
Office 365 E3/E5, A3/A5 or F3
Intune P1
Defender for Business or Endpoint P1/P2

Successful application of the baseline outside of this configuration cannot be guaranteed.

Where next

Importing the baseline
Included settings
Settings guidance, including the post-import configuration that is required

Please also visit IntuneMacAdmins for additional information on macOS management with Intune.