Apple recently announced new ways for users to generate content that are collectively labeled Apple Intelligence (AI). You can learn more about these capabilities based on the documentation Apple has shared via Appleseed for IT and their Device Management Client Schema on GitHub.
We’re excited to share that Microsoft Intune’s mobile device management (MDM) and mobile app management (MAM) controls are now updated to allow you to configure availability of these new capabilities. As detailed below, when Apple Intelligence features are released in iOS 18.1, iPadOS 18.1 and macOS Sequoia 15.1, Intune will allow you to customize usage for your environment.
Our ongoing goal is to enable you to balance productivity and security in your environment by making sure the right policy controls are available regardless of your deployment model. If you have feedback on these new Intune MDM or MAM capabilities, please let us know in the comments below!
Intune MDM controls for iOS, iPadOS and macOS devices
For Apple managed supervised devices (ADE enrolled iOS/iPadOS and all macOS), Intune supports new settings for Apple Intelligence in the Restrictions payload and Math Settings declaration. These settings require the device to be supervised. For personal or bring-your-own (BYO) iOS /iPadOS devices there are no MDM provided controls. For customers looking for control on BYO or non-supervised devices, we support Intune MAM controls on both managed and unmanaged devices.
For iOS 18.1, iPadOS 18.1 and macOS Sequoia 15.1 Intune will support the following configuration controls starting in the noted Intune service release:
Apple Intelligence feature | Available actions | OS version | Intune release |
Allow Call Recording | If ‘false’, call recording is disabled. | iOS 18.1 and later. Supervised device required. |
2411 |
Allow External Intelligence Integrations | If ‘false’, disables the use of external, cloud-based intelligence services with Siri. | iOS 18.2 and later, and macOS 15.2 and later. On iOS, this restriction is temporarily allowed on unsupervised and user enrollments. In a future release, this restriction will require supervision and will be ignored on non-supervised devices. The setting available in the settings catalog currently requires supervision. In 2501, it will no longer require supervision. |
2411 |
Allow External Intelligence Integrations Sign In | If false, forces external intelligence providers into anonymous mode. If a user is already signed in to an external intelligence provider, applying this restriction will cause them to be signed out when the next request is attempted. | Available in iOS 18.2 and later, and macOS 15.2 and later. |
2411 |
Allow Genmoji | If 'false', prohibits creating new Genmoji. | iOS 18.1 and later. Supervised device required. |
2408 |
Allow Image Playground | If 'false', prohibits the use of image generation. | iOS 18.1 and later and macOS Sequoia 15.1 and later. Supervised device required. |
2408 |
Allow Image Wand | If 'false', prohibits the use of Image Wand. | iOS 18.1 and later. Supervised device required. |
2408 |
Allow Mail Summary | If 'false', disables the ability to create summaries of email messages manually. This doesn't affect automatic summary generation. | iOS 18.1 and later and macOS Sequoia 15.1 and later. Supervised device required. |
2411 |
Allow Personalized Handwriting Results | If false, prevents the system from generating text in the user's handwriting. | iOS 18.1 and later. Supervised device required. |
2408 |
Allow Writing Tools | If 'false', disables Apple Intelligence writing tools. | iOS 18.1 and later and macOS Sequoia 15.1 and later. Supervised device required. |
2408 |
Intelligence (Skip Key) | The key to skip the Intelligence pane in Setup Assistant. | iOS 18.1 and later and macOS Sequoia 15.1 and later. Supervised device required. |
2409 |
Math Notes Mode | If present, configures the Math Notes mode of the calculator. If not present, math notes mode is enabled. | iOS 18.1 and later and macOS Sequoia 15.1 and later. Supervised device required. |
2409 |
System Behavior > Math Notes | Controls whether Math Notes is allowed in other apps such as Notes. | iOS 18.1 and later and macOS Sequoia 15.1 and later. Supervised device required. |
2409 |
Notifications > Notification Settings > Notifications Enabled | If ‘false’, notifications will be disabled for this app and won't be part of summarized notifications. | iOS 9.3 and later and macOS 10.15 and later. Supervised device required. |
2207 |
Intune MAM controls for iOS, iPadOS and macOS devices
For Intune MAM protected applications running on iOS 18.1 and later, Intune will control access to new Apple Intelligence features as they release. As of September 2024, only the Writing Tools feature is available in MAM protected applications. The remaining Apple Intelligence features are available only in system applications, such as Notes or Calculator’s Math Notes, which don’t support Intune MAM. Existing Intune MAM settings to control incoming data will continue to allow you to customize the behavior for data shared into MAM protected applications, including for AI generated content.
All apps that have integrated the noted Intune App SDK version and later will manage the following Apple Intelligence features. We’ll post new MAM protections here, including the supported App SDK version.
Apple Intelligence feature | APP/MAM setting | Available actions | App SDK version |
Genmojis | Send Org Data to other apps |
- Allow Genmojis if value is “All Apps” |
19.7.5 and later for Xcode 15 and 20.2.0 for Xcode 16* |
Writing Tools | Send Org Data to other apps |
- Allow Writing Tools if value is “All Apps” - Block Writing Tools if any other value |
19.7.1 and later* |
Summarize notifications | Org data notifications |
- Prevent org data in notification summarization if value is “Blocked” or “Block org Data” - Allow org data in notification summarization if “Allow”. |
See documentation for application support: iOS/iPadOS app protection policy settings |
*Supported apps: Microsoft 365 (Office), Microsoft Edge, Microsoft Excel, Microsoft Loop, Microsoft OneDrive, Microsoft OneNote, Microsoft Outlook, Microsoft Planner, Microsoft PowerBI, Microsoft PowerPoint, Microsoft Viva Engage, Microsoft Word
Microsoft Team
If you have any questions or feedback, leave a comment on this post or reach out on X @IntuneSuppTeam.
Post Updates
10/1/2024: Additional MDM and MAM controls added for Apple Intelligence features.
10/29/2024: Updated SDK version required for Writing Tools.
11/6/2024: Added a list of supported Microsoft apps.
12/16/2024: Added MDM control support for the following settings: Allow External Intelligence Integrations & Allow External Intelligence Integrations Sign In.
12/17/2024: Added MAM control support for Genmojis.
Updated Dec 18, 2024
Version 40.0Intune_Support_Team
Microsoft
Joined October 11, 2018
Intune Customer Success
Follow this blog board to get notified when there's new activity