Rule explorer
Browse every hardening rule in the catalog. Filter by platform, severity, profile level and whether the check can be automated.
100 rules foundof 8,597Page 1 of 4
| ID | Title | Platform | Severity | Level | Check |
|---|---|---|---|---|---|
| TMA-INTUNE-MACOS-2.7.1 | Ensure "Removal Password" is absent or is securely configured with restricted accessintune-macos · Level 1 | intune-macos | High | 1 | Manual review |
| TMA-INTUNE-MACOS-2.8.2 | Ensure "Allow Password Sharing" is set to "False"intune-macos · Level 1 | intune-macos | High | 1 | Manual review |
| TMA-INTUNE-MACOS-2.8.23 | Ensure "Allow Password Auto Fill" is set to "False"intune-macos · Level 2 | intune-macos | High | 2 | Manual review |
| TMA-INTUNE-MACOS-2.8.32 | Ensure "Allow Password Proximity Requests" is set to "False"intune-macos · Level 1 | intune-macos | High | 1 | Manual review |
| TMA-INTUNE-MACOS-2.9.1.1 | Ensure "Maximum Passcode Age In Days" is set to "365" or less, but not 0intune-macos · Level 1 | intune-macos | High | 1 | Manual review |
| TMA-INTUNE-MACOS-2.9.1.5 | Ensure "Passcode Reuse Limit" is set to "24" or moreintune-macos · Level 1 | intune-macos | High | 1 | Manual review |
| TMA-INTUNE-MACOS-2.9.1.6 | Ensure "Require Passcode on Device" is set to "True"intune-macos · Level 1 | intune-macos | High | 1 | Manual review |
| TMA-INTUNE-MACOS-2.9.1.9 | Ensure "Require Complex Passcode" is set to "True"intune-macos · Level 2 | intune-macos | High | 2 | Manual review |
| TMA-INTUNE-MACOS-2.9.1.11 | Ensure "Require Alphanumeric Passcode" is set to "Enabled"intune-macos · Level 1 | intune-macos | High | 1 | Manual review |
| TMA-INTUNE-MACOS-2.9.1.12 | Ensure "Minimum Passcode Length" is set to "15" or moreintune-macos · Level 1 | intune-macos | High | 1 | Manual review |
| TMA-INTUNE-MACOS-2.11.2.1 | Ensure "Ask For Password" is set to "True" and "Ask For Password Delay" is absent or set to "0"intune-macos · Level 1 | intune-macos | High | 1 | Manual review |
| TMA-INTUNE-MACOS-2.1.1.1 | Ensure "Disable Guest Account" is set to "True"intune-macos · Level 1 | intune-macos | Medium | 1 | Manual review |
| TMA-INTUNE-MACOS-2.3.1.1 | Ensure "User Enters Missing Info" is set to "True"intune-macos · Level 1 | intune-macos | Medium | 1 | Manual review |
| TMA-INTUNE-MACOS-2.3.1.2 | Ensure "Enable" is set to "On"intune-macos · Level 1 | intune-macos | Medium | 1 | Manual review |
| TMA-INTUNE-MACOS-2.3.1.3 | Ensure "Defer Force At User Login Max Bypass Attempts" is set to "0"intune-macos · Level 1 | intune-macos | Medium | 1 | Manual review |
| TMA-INTUNE-MACOS-2.3.1.4 | Ensure "Show Recovery Key" is set to "Disabled"intune-macos · Level 1 | intune-macos | Medium | 1 | Manual review |
| TMA-INTUNE-MACOS-2.3.1.5 | Ensure "Force Enable In Setup Assistant" is set to "True"intune-macos · Level 1 | intune-macos | Medium | 1 | Manual review |
| TMA-INTUNE-MACOS-2.3.1.6 | Ensure "Defer" is set to "Enabled"intune-macos · Level 1 | intune-macos | Medium | 1 | Manual review |
| TMA-INTUNE-MACOS-2.3.2.1 | Ensure "Prevent FileVault From Being Disabled" is set to "True"intune-macos · Level 1 | intune-macos | Medium | 1 | Manual review |
| TMA-INTUNE-MACOS-2.4.1.1 | Ensure "Show Full Name" is set to "True"intune-macos · Level 1 | intune-macos | Medium | 1 | Manual review |
| TMA-INTUNE-MACOS-2.4.2.1 | Ensure "Disable Login Items Suppression" is set to "True"intune-macos · Level 1 | intune-macos | Medium | 1 | Manual review |
| TMA-INTUNE-MACOS-2.6.2.1 | Ensure "Enable Stealth Mode" is set to "True"intune-macos · Level 1 | intune-macos | Medium | 1 | Manual review |
| TMA-INTUNE-MACOS-2.6.2.2 | Ensure "Enable Firewall" is set to "True"intune-macos · Level 1 | intune-macos | Medium | 1 | Manual review |
| TMA-INTUNE-MACOS-2.8.1 | Ensure "Allow Bluetooth Sharing Modification" is set to "False"intune-macos · Level 1 | intune-macos | Medium | 1 | Manual review |
| TMA-INTUNE-MACOS-2.8.3 | Ensure "Allow File Sharing Modification" is set to "False"intune-macos · Level 1 | intune-macos | Medium | 1 | Manual review |