Skip to content
OpenIntuneBaseline

macOS included settings

Primary information regarding adherence to security frameworks can be found in the project README.

Included settings

Section titled “Included settings”
  • Entra join and authentication via Platform SSO Secure Enclave
  • Core device security restrictions
  • Device encryption via FileVault
  • Microsoft Edge (split into multiple policies for easier management)
  • Microsoft Office (including OneDrive Known Folder Move)
  • Microsoft Defender for Endpoint
  • Update configuration
  • Compliance policies (device health, device security and password)

Most policies are Settings Catalog and will show in Devices > Configuration profiles. The compliance policies will show in Devices > Compliance.

For a complete list of settings, see the settings reference, which includes a searchable view of the baseline on intunesettings.app, and SETTINGSOUTPUT.md in the repo. The full policy changelog is in CHANGELOG.md.