Ensure "Allow user to move messages from this account" is set to "Disabled"

LowLevel 1Manual reviewios

Description

This recommendation pertains to whether a message can be moved from an institutionally-configured mail account to an end user-configured mail account. It also limits forwarding or replying from a different account than the one from which the message originated. Note: This recommendation only applies if an institutionally-configured mail account resides on the device. Profile: Level 1 - End-User Owned Devices.

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

From the Configuration Profile: Apple Configurator > Configuration Profile > Mail tab > verify that the checkbox for Allow user to move messages from this account is unchecked. From the device, there is no audit mechanism.

How it is fixed

Fix method: Guidance or infrastructure patch

From the Configuration Profile: Apple Configurator > Configuration Profile > Mail tab > check the checkbox for Allow user to move messages from this account.

Properties

Operating systems: Any
Tags: iosend-user-owned
Reference: CIS Apple iOS 26 Benchmark v1.0.0 - 2.7.1 Ensure "Allow user to move messages from this account" is set to "Disabled"