Ensure "Allow documents from managed sources in unmanaged destinations" is set to "Disabled"

中级别 1人工审核ios

说明

This recommendation pertains to Apple's managed application implementation. The terms "managed" and "unmanaged" refer to application classifications made through Managed Open In, a feature introduced in iOS 7. Managed Open In provides for data containerization. Institutionally-provisioned applications are designated as managed. Applications elected by the end user are designated as unmanaged. Profile: Level 1 - End-User Owned Devices.

检查方式

审计方法: 人工审核

此项建议无法自动检查。当您传入 --include-manual 时，扫描结果会列出该项并附带这些说明。

From the Configuration Profile: Apple Configurator > Configuration Profile > Restrictions tab > verify that under the tab Functionality, the checkbox for Allow documents from managed sources in unmanaged destinations is unchecked. Or, from the device: Settings > General > VPN & Device Management > <_Profile Name_> > Restrictions > Confirm Opening documents from managed to unmanaged apps not allowed is displayed.

修复方式

修复方法: 操作指南或基础设施补丁

Apple Configurator > Configuration Profile > Restrictions tab > under the tab Functionality, uncheck the checkbox for Allow documents from managed sources in unmanaged destinations > Deploy the Configuration Profile.

属性

操作系统: 任意
标签: iosend-user-owned
参考: CIS Apple iOS 26 Benchmark v1.0.0 - 2.2.1.7 Ensure "Allow documents from managed sources in unmanaged destinations" is set to "Disabled"