Blog Post

Intune Customer Success
5 MIN READ

Microsoft Intune support for Apple Intelligence

Intune_Support_Team's avatar
Sep 24, 2024

Apple recently announced new ways for users to generate content that are collectively labeled Apple Intelligence (AI). You can learn more about these capabilities based on the documentation Apple has shared via Appleseed for IT and their Device Management Client Schema on GitHub.

We’re excited to share that Microsoft Intune’s mobile device management (MDM) and mobile app management (MAM) controls are now updated to allow you to configure availability of these new capabilities. As detailed below, when Apple Intelligence features are released in iOS 18.1, iPadOS 18.1 and macOS Sequoia 15.1, Intune will allow you to customize usage for your environment.

Our ongoing goal is to enable you to balance productivity and security in your environment by making sure the right policy controls are available regardless of your deployment model.  If you have feedback on these new Intune MDM or MAM capabilities, please let us know in the comments below!

Intune MDM controls for iOS, iPadOS and macOS devices

For Apple managed supervised devices (ADE enrolled iOS/iPadOS and all macOS), Intune supports new settings for Apple Intelligence in the Restrictions payload and Math Settings declaration. These settings require the device to be supervised.  For personal or bring-your-own (BYO) iOS /iPadOS devices there are no MDM provided controls. For customers looking for control on BYO or non-supervised devices, we support Intune MAM controls on both managed and unmanaged devices.

For iOS 18.1, iPadOS 18.1 and macOS Sequoia 15.1 Intune will support the following configuration controls starting in the noted Intune service release:

Apple Intelligence feature Available actions OS version Intune release
Allow Call Recording If ‘false’, call recording is disabled. iOS 18.1 and later. Supervised device required.

2411

Allow External Intelligence Integrations If ‘false’, disables the use of external, cloud-based intelligence services with Siri.  iOS 18.2 and later, and macOS 15.2 and later.

On iOS, this restriction is temporarily allowed on unsupervised and user enrollments. In a future release, this restriction will require supervision and will be ignored on non-supervised devices.

The setting available in the settings catalog currently requires supervision.

In 2501, it will no longer require supervision.

2411

Allow External Intelligence Integrations Sign In If false, forces external intelligence providers into anonymous mode. If a user is already signed in to an external intelligence provider, applying this restriction will cause them to be signed out when the next request is attempted.  Available in iOS 18.2 and later, and macOS 15.2 and later.

2411

Allow Genmoji If 'false', prohibits creating new Genmoji. iOS 18.1 and later. Supervised device required.

2408

Allow Image Playground If 'false', prohibits the use of image generation. iOS 18.1 and later and macOS Sequoia 15.1 and later. Supervised device required.

2408

Allow Image Wand If 'false', prohibits the use of Image Wand. iOS 18.1 and later. Supervised device required.

2408

Allow Mail Summary If 'false', disables the ability to create summaries of email messages manually. This doesn't affect automatic summary generation. iOS 18.1 and later and macOS Sequoia 15.1 and later. Supervised device required.

2411

Allow Personalized Handwriting Results If false, prevents the system from generating text in the user's handwriting. iOS 18.1 and later. Supervised device required.

2408

Allow Writing Tools If 'false', disables Apple Intelligence writing tools. iOS 18.1 and later and macOS Sequoia 15.1 and later. Supervised device required.

2408

Intelligence (Skip Key) The key to skip the Intelligence pane in Setup Assistant. iOS 18.1 and later and macOS Sequoia 15.1 and later. Supervised device required.

2409

Math Notes Mode If present, configures the Math Notes mode of the calculator. If not present, math notes mode is enabled. iOS 18.1 and later and macOS Sequoia 15.1 and later. Supervised device required.

2409

System Behavior > Math Notes Controls whether Math Notes is allowed in other apps such as Notes. iOS 18.1 and later and macOS Sequoia 15.1 and later. Supervised device required.

2409

Notifications > Notification Settings > Notifications Enabled If ‘false’, notifications will be disabled for this app and won't be part of summarized notifications. iOS 9.3 and later and macOS 10.15 and later. Supervised device required.

2207

 

Intune MAM controls for iOS, iPadOS and macOS devices

For Intune MAM protected applications running on iOS 18.1 and later, Intune will control access to new Apple Intelligence features as they release. As of September 2024, only the Writing Tools feature is available in MAM protected applications. The remaining Apple Intelligence features are available only in system applications, such as Notes or Calculator’s Math Notes, which don’t support Intune MAM. Existing Intune MAM settings to control incoming data will continue to allow you to customize the behavior for data shared into MAM protected applications, including for AI generated content.


All apps that have integrated the noted Intune App SDK version and later will manage the following Apple Intelligence features. We’ll post new MAM protections here, including the supported App SDK version.

Apple Intelligence feature APP/MAM setting Available actions App SDK version
Genmojis Send Org Data to other apps

- Allow Genmojis if value is “All Apps”

- Block Genmojis if any other value

19.7.5 and later for Xcode 15 and 20.2.0 for Xcode 16*
Writing Tools Send Org Data to other apps

- Allow Writing Tools if value is “All Apps”

- Block Writing Tools if any other value

19.7.1 and later*
Summarize notifications Org data notifications

- Prevent org data in notification summarization if value is “Blocked” or “Block org Data”

- Allow org data in notification summarization if “Allow”.

See documentation for application support: iOS/iPadOS app protection policy settings
 

*Supported apps: Microsoft 365 (Office), Microsoft Edge, Microsoft Excel, Microsoft Loop, Microsoft OneDrive, Microsoft OneNote, Microsoft Outlook, Microsoft Planner, Microsoft PowerBI, Microsoft PowerPoint, Microsoft Viva Engage, Microsoft Word
Microsoft Team

If you have any questions or feedback, leave a comment on this post or reach out on X @IntuneSuppTeam.

 

Post Updates

10/1/2024: Additional MDM and MAM controls added for Apple Intelligence features.
10/29/2024: Updated SDK version required for Writing Tools.
11/6/2024: Added a list of supported Microsoft apps.
12/16/2024: Added MDM control support for the following settings: Allow External Intelligence IntegrationsAllow External Intelligence Integrations Sign In.
12/17/2024: Added MAM control support for Genmojis.

Updated Dec 18, 2024
Version 40.0
  • kchancellor's avatar
    kchancellor
    Copper Contributor

    @Microsoft, can you please move this information and its updates to proper Intune documentation with RSS feed capability for updates to the tables?  https://learn.microsoft.com/en-us/mem/intune.  I do see the RSS link below, but it pulls in more than this page's information.  I suspect I am not the only Global Admin that has a corporate directive to stay on top of Apple Intelligence controls and a need to be able to report to senior leadership about the ability to control it.

  • VeronicaStormo's avatar
    VeronicaStormo
    Copper Contributor

    Will Intune control access to the new Apple Intelligence features on BYOD iOS/iPadOS devices  that do not have apps integreted  with Intune App SDK?

  • Matthew_Ashmore's avatar
    Matthew_Ashmore
    Copper Contributor

    Intune_Support_Team - Can you please update the min APP SDK version for the writing tools block to 19.7.1 / 20.1.2 or confirm that 19.6.0 or later is sufficient for blocking the writing tools AI feature?  I see conflicting information on multiple sites. 

  • MattDrnovscek's avatar
    MattDrnovscek
    Copper Contributor

    I'd like to see a list of all MS Apps and their SDK version so we can determine when controls/capabilities will be available across all Microsoft protected apps

  • nperrusio's avatar
    nperrusio
    Copper Contributor

    What's the timeline for 1st party Microsoft apps to be on the new SDK? If I recall they usually have their own timelines.

    Also, what about notification summarization that is occurring. Any MAM control to stop that on a device that's not supervised and can't use the MDM controls?