Ensure "Allow Printer Sharing Modification" is set to "False"

MediumLevel 1Manual reviewintune-macos

Description

Printer Sharing allows users to share connected printers with other devices on the network. The printer sharing modification setting controls whether users can enable or disable printer sharing through System Settings. When printer sharing is enabled, other devices can discover and connect to printers attached to the Mac. The benchmark marks this a Manual check of an Intune macOS policy setting that cannot be read from the endpoint with a script, so TMAegis lists it as a manual review item with the audit steps (the policy must be inspected in the Intune admin center or on the managed device).

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

macOS: Intune admin center: Expand the Restrictions heading; Verify that Allow Printer Sharing Modification is present and set to False. On the device: Double-click com.apple.applicationaccess Profile; Under the Details section; Confirm Allow Printer Sharing Modification is set to False

How it is fixed

Fix method: Guidance or infrastructure patch

Intune admin center: Select Restrictions; Check Allow Printer Sharing Modification; On the left side of the page set Allow Printer Sharing Modification to False; Verify that Allow Printer Sharing Modification is present and set to False

Properties

Operating systems: Any
Tags: intune-macosintunemanual-review
Reference: CIS Apple macOS 26 Tahoe Intune Benchmark v1.0.0 - 2.8.28 Ensure "Allow Printer Sharing Modification" is set to "False"