TMAegisBeta
More rules for intune-macos

Intune: macOS

TMA-INTUNE-MACOS-2.6.1.1

Ensure "Auto Activation" is set to "False"

LowLevel 2Manual reviewintune-macos

Description

Content caching stores and serves various types of content from Apple, including software updates, app store purchases, iCloud data, and other downloadable content to reduce internet bandwidth usage. When "Auto Activation" is enabled, content caching automatically activates when possible and prevents manual deactivation. This capability requires macOS clients to function as P2P nodes for Apple content distribution. The benchmark marks this a Manual check of an Intune macOS policy setting that cannot be read from the endpoint with a script, so TMAegis lists it as a manual review item with the audit steps (the policy must be inspected in the Intune admin center or on the managed device).

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

macOS: Intune admin center: Expand the Networking heading; Under the Content Caching subheading; Verify that Auto Activation is present and set to False. On the device: Double-click com.apple.AssetCache.managed Profile; Under the Details section; Confirm Automatically activate Content Caching is set to False

How it is fixed

Fix method: Guidance or infrastructure patch

Intune admin center: Select Networking then Content Caching; Check Auto Activation; On the left side of the page set Auto Activation to False; Verify that Auto Activation is present and set to False

Properties

Operating systems
Any
Tags
intune-macosintunemanual-review
Reference
CIS Apple macOS 26 Tahoe Intune Benchmark v1.0.0 - 2.6.1.1 Ensure "Auto Activation" is set to "False"