148 lines
10 KiB
JSON
148 lines
10 KiB
JSON
{
|
|
"policy": {
|
|
"@odata.context": "https://graph.microsoft.com/beta/$metadata#deviceManagement/deviceConfigurations/$entity",
|
|
"@odata.type": "#microsoft.graph.macOSGeneralDeviceConfiguration",
|
|
"id": "6f702616-7697-48f1-9915-47df42153720",
|
|
"lastModifiedDateTime": "2024-10-15T08:16:41.2470709Z",
|
|
"roleScopeTagIds": [
|
|
"0"
|
|
],
|
|
"supportsScopeTags": true,
|
|
"deviceManagementApplicabilityRuleOsEdition": null,
|
|
"deviceManagementApplicabilityRuleOsVersion": null,
|
|
"deviceManagementApplicabilityRuleDeviceMode": null,
|
|
"createdDateTime": "2022-12-21T12:41:40.7204253Z",
|
|
"description": "This profile limits the use of personal Apple features on the device like gaming, iCloud backup and sharing with external devices to reduce attack vector and avoid dataloss.\nThe profile marks hansemerkur.de as trusted email domain to avoid security warning for internal mails.\nThe profile also configures a deferal for minor- and major updates to avoid damage from early patching.\nThe profile enforces the Hansemerkur password policy.",
|
|
"displayName": "macOS Geräteeinschränkungen",
|
|
"version": 24,
|
|
"compliantAppListType": "none",
|
|
"emailInDomainSuffixes": [
|
|
"hansemerkur.de",
|
|
"berlin-direktversicherung.de"
|
|
],
|
|
"passwordBlockSimple": false,
|
|
"passwordExpirationDays": 65535,
|
|
"passwordMinimumCharacterSetCount": 1,
|
|
"passwordMinimumLength": 12,
|
|
"passwordMinutesOfInactivityBeforeLock": 0,
|
|
"passwordMinutesOfInactivityBeforeScreenTimeout": 5,
|
|
"passwordPreviousPasswordBlockCount": 24,
|
|
"passwordRequiredType": "alphanumeric",
|
|
"passwordRequired": true,
|
|
"passwordMaximumAttemptCount": 5,
|
|
"passwordMinutesUntilFailedLoginReset": null,
|
|
"keychainBlockCloudSync": true,
|
|
"safariBlockAutofill": false,
|
|
"cameraBlocked": false,
|
|
"iTunesBlockMusicService": false,
|
|
"spotlightBlockInternetResults": false,
|
|
"keyboardBlockDictation": false,
|
|
"definitionLookupBlocked": false,
|
|
"appleWatchBlockAutoUnlock": false,
|
|
"iTunesBlockFileSharing": true,
|
|
"iCloudBlockDocumentSync": true,
|
|
"iCloudBlockMail": true,
|
|
"iCloudBlockAddressBook": true,
|
|
"iCloudBlockCalendar": true,
|
|
"iCloudBlockReminders": true,
|
|
"iCloudBlockBookmarks": true,
|
|
"iCloudBlockNotes": true,
|
|
"airDropBlocked": true,
|
|
"passwordBlockModification": false,
|
|
"passwordBlockFingerprintUnlock": false,
|
|
"passwordBlockAutoFill": false,
|
|
"passwordBlockProximityRequests": false,
|
|
"passwordBlockAirDropSharing": false,
|
|
"softwareUpdatesEnforcedDelayInDays": 1,
|
|
"updateDelayPolicy": "delayMajorOsUpdateVisibility",
|
|
"contentCachingBlocked": false,
|
|
"iCloudBlockPhotoLibrary": true,
|
|
"screenCaptureBlocked": false,
|
|
"classroomAppBlockRemoteScreenObservation": true,
|
|
"classroomAppForceUnpromptedScreenObservation": false,
|
|
"classroomForceAutomaticallyJoinClasses": true,
|
|
"classroomForceRequestPermissionToLeaveClasses": true,
|
|
"classroomForceUnpromptedAppAndDeviceLock": true,
|
|
"iCloudBlockActivityContinuation": true,
|
|
"addingGameCenterFriendsBlocked": true,
|
|
"gameCenterBlocked": true,
|
|
"multiplayerGamingBlocked": true,
|
|
"wallpaperModificationBlocked": false,
|
|
"eraseContentAndSettingsBlocked": false,
|
|
"softwareUpdateMajorOSDeferredInstallDelayInDays": 7,
|
|
"softwareUpdateMinorOSDeferredInstallDelayInDays": null,
|
|
"softwareUpdateNonOSDeferredInstallDelayInDays": null,
|
|
"touchIdTimeoutInHours": null,
|
|
"iCloudPrivateRelayBlocked": true,
|
|
"iCloudDesktopAndDocumentsBlocked": true,
|
|
"activationLockWhenSupervisedAllowed": false,
|
|
"compliantAppsList": [
|
|
|
|
],
|
|
"privacyAccessControls": [
|
|
{
|
|
"displayName": "Cisco AnyConnect ISE Posture",
|
|
"identifier": "/opt/cisco/anyconnect/bin/aciseposture",
|
|
"identifierType": "path",
|
|
"codeRequirement": "identifier aciseposture and anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = DE8Y96K9QP",
|
|
"staticCodeValidation": false,
|
|
"blockCamera": false,
|
|
"blockMicrophone": false,
|
|
"blockScreenCapture": false,
|
|
"blockListenEvent": false,
|
|
"speechRecognition": "notConfigured",
|
|
"accessibility": "notConfigured",
|
|
"addressBook": "notConfigured",
|
|
"calendar": "notConfigured",
|
|
"reminders": "enabled",
|
|
"photos": "notConfigured",
|
|
"mediaLibrary": "notConfigured",
|
|
"fileProviderPresence": "notConfigured",
|
|
"systemPolicyAllFiles": "notConfigured",
|
|
"systemPolicySystemAdminFiles": "notConfigured",
|
|
"systemPolicyDesktopFolder": "enabled",
|
|
"systemPolicyDocumentsFolder": "enabled",
|
|
"systemPolicyDownloadsFolder": "enabled",
|
|
"systemPolicyNetworkVolumes": "disabled",
|
|
"systemPolicyRemovableVolumes": "enabled",
|
|
"postEvent": "notConfigured",
|
|
"appleEventsAllowedReceivers": [
|
|
|
|
]
|
|
},
|
|
{
|
|
"displayName": "Cisco Secure Client ISE Posture",
|
|
"identifier": "/opt/cisco/secureclient/bin/csc_iseposture",
|
|
"identifierType": "path",
|
|
"codeRequirement": "identifier \"csc_iseposture\" and anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = DE8Y96K9QP",
|
|
"staticCodeValidation": false,
|
|
"blockCamera": false,
|
|
"blockMicrophone": false,
|
|
"blockScreenCapture": false,
|
|
"blockListenEvent": false,
|
|
"speechRecognition": "notConfigured",
|
|
"accessibility": "notConfigured",
|
|
"addressBook": "notConfigured",
|
|
"calendar": "notConfigured",
|
|
"reminders": "enabled",
|
|
"photos": "notConfigured",
|
|
"mediaLibrary": "notConfigured",
|
|
"fileProviderPresence": "notConfigured",
|
|
"systemPolicyAllFiles": "notConfigured",
|
|
"systemPolicySystemAdminFiles": "notConfigured",
|
|
"systemPolicyDesktopFolder": "enabled",
|
|
"systemPolicyDocumentsFolder": "enabled",
|
|
"systemPolicyDownloadsFolder": "enabled",
|
|
"systemPolicyNetworkVolumes": "disabled",
|
|
"systemPolicyRemovableVolumes": "enabled",
|
|
"postEvent": "notConfigured",
|
|
"appleEventsAllowedReceivers": [
|
|
|
|
]
|
|
}
|
|
]
|
|
},
|
|
"policyName": "macOS Geräteeinschränkungen",
|
|
"policyType": "ConfigurationProfile"
|
|
}
|