TMA-INTUNE-MACOS-2.14.2.6
Ensure "Allow Genmoji" is set to "Blocked"
Description
Apple Intelligence Genmoji is an AI-powered feature integrated across the operating system that enables users to generate custom emojis by combining text descriptions and content from the photo library. This functionality is accessible via the system keyboard and is integrated into communication applications. The benchmark marks this a Manual check of an Intune macOS policy setting that cannot be read from the endpoint with a script, so TMAegis lists it as a manual review item with the audit steps (the policy must be inspected in the Intune admin center or on the managed device).
How it is checked
Audit method: Manual review
This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.
macOS: Intune admin center: Expand the Declarative Device Management (DDM) heading; Under the Intelligence Settings subheading; Verify that Allow Genmoji is present and set to Blocked. On the device: Double-click Management Profile; Under the Device Declarations section; Click Intelligence Settings; Confirm Allow Genmoji is set to No
How it is fixed
Fix method: Guidance or infrastructure patch
Intune admin center: Select Declarative Device Management (DDM) then Intelligence Settings; Check Allow Genmoji; On the left side of the page set Allow Genmoji to Blocked; Verify that Allow Genmoji is present and set to Blocked
Properties
- Operating systems
- Any
- Tags
- intune-macosintunemanual-review
- Reference
- CIS Apple macOS 26 Tahoe Intune Benchmark v1.0.0 - 2.14.2.6 Ensure "Allow Genmoji" is set to "Blocked"