Ensure "Enforce Latest Software Update Version" is set to "True"

보통레벨 1수동 검토intune-macos

설명

The "Enforce Latest Software Update Version" setting, mandates that device install the latest available software update. When set to "True", the update is enforced by the system rather than remaining optional for the user. Administrators may also configure an "Install Time" (e.g., 02:00) and a "Delay In Days" (0-30) to manage the rollout. Intune allows a delay of up to 30 days, this may exceed the recommended remediation window for critical vulnerabilities, organizations should set this delay as short as operationally feasible (typically 7 days) to maintain a strong security posture. ... The benchmark marks this a Manual check of an Intune macOS policy setting that cannot be read from the endpoint with a script, so TMAegis lists it as a manual review item with the audit steps (the policy must be inspected in the Intune admin center or on the managed device).

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

macOS: Intune admin center: Expand the Declarative Device Management (DDM) heading; Under the Software Update Enforce Latest subheading; Verify that Enforce Latest Software Update Version is present and set to True

조치 방법

조치 방식: 가이드 또는 인프라 패치

Intune admin center: Select Declarative Device Management (DDM) then Software Update Enforce Latest; Check Enforce Latest Software Update Version; On the left side of the page set Enforce Latest Software Update Version to True; Verify that Enforce Latest Software Update Version is present and set to True

속성

운영 체제: 모두
태그: intune-macosintunemanual-review
참고 자료: CIS Apple macOS 26 Tahoe Intune Benchmark v1.0.0 - 2.10.1.1 Ensure "Enforce Latest Software Update Version" is set to "True"