TMA-IPADOS-2.7.2
Ensure "Allow Mail Drop" is set to "Disabled"
Description
This recommendation pertains to whether a message attachment can be uploaded or accessed through Apple's Mail Drop service. This is a system-wide setting and would block Mail Drop for any personal accounts on the device using Apple Mail. This recommendation does not need to be configured if your organization is using an email application other than Apple Mail. Profile: Level 1 - End-User Owned Devices. iPadOS-specific: applies to iPad devices (differs from the iOS 26 benchmark item).
How it is checked
Audit method: Manual review
This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.
From the Configuration Profile: Apple Configurator > Configuration Profile > Mail tab > verify that the checkbox for Allow Mail Drop is unchecked. From the device, there is no audit mechanism.
How it is fixed
Fix method: Guidance or infrastructure patch
From the Configuration Profile: Apple Configurator > Configuration Profile > Mail tab > uncheck the checkbox for Allow Mail Drop.
Properties
- Operating systems
- Any
- Tags
- iosipadosend-user-owned
- Reference
- CIS Apple iPadOS 26 Benchmark v1.0.0 - 2.7.2 Ensure "Allow Mail Drop" is set to "Disabled"