Ensure "Allow Cloud Address Book" is set to "False"

MediumLevel 1Manual reviewintune-macos

Description

iCloud Address Book (Contacts) is a cloud-based service that synchronizes contact information across Apple devices using Apple's iCloud infrastructure. When enabled, saved contact details including names, phone numbers, email addresses, physical addresses, and other information is synced with iCloud and made available on all devices signed into the same Apple ID. The benchmark marks this a Manual check of an Intune macOS policy setting that cannot be read from the endpoint with a script, so TMAegis lists it as a manual review item with the audit steps (the policy must be inspected in the Intune admin center or on the managed device).

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

macOS: Intune admin center: Expand the Restrictions heading; Verify that Allow Cloud Address Book is present and set to False. On the device: Double-click com.apple.applicationaccess Profile; Under the Details section; Confirm Disallow iCloud Contacts is set to True

How it is fixed

Fix method: Guidance or infrastructure patch

Intune admin center: Select Restrictions; Check Allow Cloud Address Book; On the left side of the page set Allow Cloud Address Book to False; Verify that Allow Cloud Address Book is present and set to False

Properties

Operating systems: Any
Tags: intune-macosintunemanual-review
Reference: CIS Apple macOS 26 Tahoe Intune Benchmark v1.0.0 - 2.8.36 Ensure "Allow Cloud Address Book" is set to "False"