Audit Find My Mac

LowLevel 2Manual reviewmacos

Description

Find My is Apple's consumer solution for device tracking of your devices. This allows a user to track the location of devices associated with their Apple Account. This is a great solution for consumer or user device management and tracking, but it is not meant to be an enterprise management solution to device tracking and information management on enterprise managed devices.

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

GUI: System Settings > Apple Account > iCloud > Show More Apps > Verify that Find My Mac is set to your organization's requirements. Terminal: sudo /usr/bin/osascript -l JavaScript (JXA) reading NSUserDefaults suite com.apple.applicationaccess, key allowFindMyDevice The output will either be true, Find My Device is enabled, or false, Find My Device is disabled depending on your organizations requirements.

How it is fixed

Fix method: Guidance or infrastructure patch

Profile (preferred): com.apple.applicationaccess allowFindMyDevice = <<true/>or<false/>> depending on your organization's. GUI: System Settings > Apple Account > iCloud > Show More Apps > Set Find My Mac is set to your organization's requirements.

Properties

Operating systems: macos-26
Tags: macossystem-settings
Reference: CIS Apple macOS 26 Tahoe Benchmark v1.1.0 - 2.1.1.6 Audit Find My Mac