Ensure "Allow Media Sharing Modification" is set to "False"

MediumLevel 1Manual reviewintune-macos

Description

Media Sharing settings in macOS allow users to share downloaded content, including music, movies, TV shows, and photos across Apple devices on the same network. The benchmark marks this a Manual check of an Intune macOS policy setting that cannot be read from the endpoint with a script, so TMAegis lists it as a manual review item with the audit steps (the policy must be inspected in the Intune admin center or on the managed device).

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

macOS: Intune admin center: Expand the Restrictions heading; Verify that Allow Media Sharing Modification is present and set to False. On the device: Double-click com.apple.applicationaccess Profile; Under the Details section; Confirm Allow Media Sharing Modification is set to False

How it is fixed

Fix method: Guidance or infrastructure patch

Intune admin center: Select Restrictions; Check Allow Media Sharing Modification; On the left side of the page set Allow Media Sharing Modification to False; Verify that Allow Media Sharing Modification is present and set to False

Properties

Operating systems: Any
Tags: intune-macosintunemanual-review
Reference: CIS Apple macOS 26 Tahoe Intune Benchmark v1.0.0 - 2.8.6 Ensure "Allow Media Sharing Modification" is set to "False"