Ensure "Allow Internet Sharing Modification" is set to "False"

MediumLevel 1Manual reviewintune-macos

Description

Internet Sharing allows a macOS device to share its internet connection with other devices via WiFi, Ethernet, or Bluetooth. This setting controls whether users can modify the Internet Sharing configuration in System Settings. The benchmark marks this a Manual check of an Intune macOS policy setting that cannot be read from the endpoint with a script, so TMAegis lists it as a manual review item with the audit steps (the policy must be inspected in the Intune admin center or on the managed device).

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

macOS: Intune admin center: Expand the Restrictions heading; Verify that Allow Internet Sharing Modification is present and set to False. On the device: Double-click com.apple.applicationaccess Profile; Under the Details section; Confirm Allow Internet Sharing Modification is set to False

How it is fixed

Fix method: Guidance or infrastructure patch

Intune admin center: Select Restrictions; Check Allow Internet Sharing Modification; On the left side of the page set Allow Internet Sharing Modification to False; Verify that Allow Internet Sharing Modification is present and set to False

Properties

Operating systems: Any
Tags: intune-macosintunemanual-review
Reference: CIS Apple macOS 26 Tahoe Intune Benchmark v1.0.0 - 2.8.19 Ensure "Allow Internet Sharing Modification" is set to "False"