TMA-INTUNE-IOS-2.3.2
Ensure "Block managed apps from storing data in iCloud" is set to "Yes"
Description
This prevents managed apps from storing and syncing data to the user's iCloud account. The benchmark marks this a Manual check of an Intune iOS/iPadOS policy setting that cannot be read from the endpoint with a script, so TMAegis lists it as a manual review item with the audit steps (the policy must be inspected in the Intune admin center or on the managed device).
How it is checked
Audit method: Manual review
This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.
iOS/iPadOS: Intune admin center: Select the Cloud and Storage heading; Verify that Block managed apps from storing data in iCloud is present and set to Yes. On the device: Tap Restrictions; Confirm Managed apps cloud sync not allowed is displayed
How it is fixed
Fix method: Guidance or infrastructure patch
Intune admin center: Select the Cloud and Storage heading; Set Block managed apps from storing data in iCloud to Yes
Properties
- Operating systems
- Any
- Tags
- intune-iosintunemanual-review
- Reference
- CIS Apple iOS 26 and iPadOS 26 Intune Benchmark v1.0.0 - 2.3.2 Ensure "Block managed apps from storing data in iCloud" is set to "Yes"