Ensure "Enabled" is set to "Disabled"

MediumLevel 1Manual reviewintune-macos

Description

Siri is Apple's virtual assistant that allows users to control their macOS device and access various functions through voice commands or typing. When enabled, Siri can perform tasks such as searching the web, opening applications, sending messages, setting reminders, and accessing system features. The assistant can be activated through keyboard shortcuts, menu bar, or voice commands. The benchmark marks this a Manual check of an Intune macOS policy setting that cannot be read from the endpoint with a script, so TMAegis lists it as a manual review item with the audit steps (the policy must be inspected in the Intune admin center or on the managed device).

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

macOS: Intune admin center: Expand the Declarative Device Management (DDM) heading; Under the Siri Settings subheading; Verify that Enabled is present and set to Disabled. On the device: Double-click Management Profile; Under the Device Declarations section; Click Siri Settings; Confirm Enabled is set to No

How it is fixed

Fix method: Guidance or infrastructure patch

Intune admin center: Select Declarative Device Management (DDM) then Siri Settings; Check Enabled; On the left side of the page set Enabled to Disabled; Verify that Enabled is present and set to Disabled

Properties

Operating systems: Any
Tags: intune-macosintunemanual-review
Reference: CIS Apple macOS 26 Tahoe Intune Benchmark v1.0.0 - 2.14.3.1 Ensure "Enabled" is set to "Disabled"