TMA-INTUNE-IOS-2.1.1
Ensure "Allow Open From Managed To Unmanaged" is set to "False"
説明
Ensures that documents in managed apps and accounts only open in other managed apps and accounts. The benchmark marks this a Manual check of an Intune iOS/iPadOS policy setting that cannot be read from the endpoint with a script, so TMAegis lists it as a manual review item with the audit steps (the policy must be inspected in the Intune admin center or on the managed device).
チェック方法
監査方法: 手動レビュー
この推奨事項は自動ではチェックできません。--include-manual を指定すると、スキャン結果にこの手順付きで一覧表示されます。
iOS/iPadOS: Intune admin center: Verify that Allow Open From Managed To Unmanaged is present and set to False. On the device: Confirm Opening documents from managed to unmanaged apps not allowed is displayed under Restrictions
修正方法
修正方法: ガイダンスまたは IaC パッチ
Intune admin center: Set Opening documents from managed to unmanaged apps not allowed to False
プロパティ
- オペレーティングシステム
- すべて
- タグ
- intune-iosintunemanual-review
- 参照
- CIS Apple iOS 26 and iPadOS 26 Intune Benchmark v1.0.0 - 2.1.1 Ensure "Allow Open From Managed To Unmanaged" is set to "False"