TMAegisBeta
More rules for intune-macos

Intune: macOS

TMA-INTUNE-MACOS-2.14.2.1.1.1

Ensure "Allow Smart Replies" is set to "Blocked"

MediumLevel 1Manual reviewintune-macos

Description

Apple Intelligence's Mail Smart Replies feature uses AI to analyze the content and context of emails and email threads to generate contextually relevant, suggested responses. These options appear when a user initiates a reply in the Mail app, allowing them to select a pre-written draft to respond quickly without manually typing a message. The benchmark marks this a Manual check of an Intune macOS policy setting that cannot be read from the endpoint with a script, so TMAegis lists it as a manual review item with the audit steps (the policy must be inspected in the Intune admin center or on the managed device).

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

macOS: Intune admin center: Expand the Declarative Device Management (DDM) heading; Under the Intelligence Settings subheading; Under Apps then Mail; Verify that Allow Smart Replies is present and set to Blocked. On the device: Double-click Management Profile; Under the Device Declarations section; Click Intelligence Settings; Confirm Allow Mail Smart Replies is set to No

How it is fixed

Fix method: Guidance or infrastructure patch

Intune admin center: Select Declarative Device Management (DDM) then Intelligence Settings; Expand Apps then expand Mail; Check Allow Smart Replies; On the left side of the page set Allow Smart Replies to Blocked; Verify that Allow Smart Replies is present and set to Blocked

Properties

Operating systems
Any
Tags
intune-macosintunemanual-review
Reference
CIS Apple macOS 26 Tahoe Intune Benchmark v1.0.0 - 2.14.2.1.1.1 Ensure "Allow Smart Replies" is set to "Blocked"