Intune: macOS
TMA-INTUNE-MACOS-2.11.1.1
Ensure "Display Sleep Timer" is set to "10" or less, but not 0
Description
The "Display Sleep Timer" controls the duration of inactivity before the display enters sleep mode. This setting is required for reliable System Sleep Timer functionality. Display sleep only turns off the screen and does not trigger system re-authentication. The benchmark marks this a Manual check of an Intune macOS policy setting that cannot be read from the endpoint with a script, so TMAegis lists it as a manual review item with the audit steps (the policy must be inspected in the Intune admin center or on the managed device).
How it is checked
Audit method: Manual review
macOS: Intune admin center: Expand the System Configuration heading; Under the Energy Saver subheading; Under Desktop Power; Verify that Display Sleep Timer is present and set to 10 or less, but not 0; Under Laptop Battery Power; Verify that Display Sleep Timer is present and set to 10 or less, but not 0; Under Laptop Power; Verify that Display Sleep Timer is present and set to 10 or less, but not 0. On the device: Double-click com.apple.MCX Profile; Under the Details section; Confirm Desktop Power Settings is set to Display Sleep Timer = 10 or Not Applicable For This Computer; ...
How it is fixed
Fix method: Guidance or infrastructure patch
Intune admin center: Select System Configuration then Energy Saver; Expand Desktop Power; Check Display Sleep Timer; Expand Laptop Battery Power; Check Display Sleep Timer; Expand Laptop Power Power; Check Display Sleep Timer; On the left side of the page set all instances of Display Sleep Timer to 10 or less, but not 0; Verify that Display Sleep Timer is present three times and is set to 10 or less, but not 0
Properties
- Operating systems
- Any
- Tags
- intune-macosintunemanual-review
- Reference
- CIS Apple macOS 26 Tahoe Intune Benchmark v1.0.0 - 2.11.1.1 Ensure "Display Sleep Timer" is set to "10" or less, but not 0