Manage Apple Intelligence on MacOS using Microsoft Intune

-


Apple Intelligence arrived in France with the update to MacOS 15 and add a lot of feature based on AI.

For the moment, the features available with Apple Intelligence are : 

  • Rereading, rewriting and summarizing text with Writing Tools
  • Correct photos and relive unique moments with a smarter Photos app
  • Create fun and original images with Image Playground
  • Create Genmoji to express yourself in any situation
  • Add a new dimension to Notes with Baguette graphique
  • Set priorities and stay focused
  • Improves interaction with Siri
  • One-click access to local information with visual intelligence
  • Use ChatGPT with Siri and Writing Tools
Apple mentions that this solution respects privacy and confidentiality rules, but certain tasks linked to the use of the ChatGPT layer can be quite intrusive, and it is therefore preferable to limit or even block access to these functions.

Manage Apple Intelligence using Microsoft Intune

  • Go to intune.microsoft.com
  • Select Devices / macOS / Configuration and select Create
  • Click New Policy
  • Profile type, select Settings catalog and click Create
  • Creation Profile, Enter Profile name and click Next
  • Configuration settings, click Add settings and search, add and configure all components if below
    • Allow Genmoji : False
    • Allow Writing Tools : False
    • Allow Apple Intelligence Report : False
    • Allow External Intelligence Integrations : Disabled
    • Allow Image Playground : False
    • Allow External Intelligence Integrations : Disabled
  • Click Next
  • Scope tags, Click Next
  • Assignments, select all devices or devices group and click Next 
  • Review + create, click Create

Monitoring

To check that the configuration profile has been applied to the Mac, simply go to :

  • Go to intune.microsoft.com
  • Select Devices / macOS / Configuration and select your Configuration Profile
 
 
 

Popular posts from this blog

How to reset computer in OOBE mode

-
Image
When you receive a new computer, it may contain various applications that are useless in a business context. To solve this problem and start with a clean PC, it may be interesting to reset it.  Here is two procedures that can be performed in OOBE mode Manual process Click CTRL + Shift + F3 , your computer restart. The Windows session is automatically opened Go to Start Menu \ Parameters \ Update & Security \ Recovery and click on Get Started Select Remove everything Select Local reinstall Click Next Click Reset Your computer restarts and proceeds to a complete reinstallation. With Command Line Click  Shift + F10 , your computer restart. Used this command line : systemreset -factoryreset Select Remove everything Select Remove files and clean the drive Click Reset Your computer restarts and proceeds to a complete reinstallation.
Read more »

How to implement Applocker with Microsoft Intune

-
Image
Applocker is tool included in Windows 10 and 11. It permit to set up policies or rules for allow or deny apps from running on your device.  We can create Applocker rules for below file types:  EXE files : .exe and .com Windows Installer files : .msi, mst, and .msp Scripts : .ps1, .bat, .cmd, .vbs, and .js DLLs : .dll and .ocx Packaged apps and packaged app installers : .appx and .msix. Sources :  https://learn.microsoft.com/fr-fr/windows/security/threat-protection/windows-defender-application-control/applocker/understanding-applocker-rule-collections The Applocker solution purpose a multiple possibilities for secure your device. We have possibilities to block or allow apps. By default, it is recommended to allow all applications and add a custom rules for a scpecific application. Prérequisites for used Applocker Device with Windows 10 or 11 for prepare the Applocker rules Application Identity service enabled Enable Applocker For create an Applocker policy, you need t...
Read more »

Rename devices with PowerShell and Microsoft Intune

-
Image
Renaming a device manually is quick and easy when we only have one device to fix. But when it comes to doing a large number of devices, then it is better to automate this action. Today, there is the method via CSP but which can have a rather random behavior, in particular on the reporting, console side. I therefore share with you a PowerShell script which, deployed with Microsoft Intune, will allow you to quickly rename your machines. Script overview This script detects the type of device used:  If it's a virtual machine , it takes the defined prefix  (CCMT in my example)  and adds a numeric complement generated with Get-Random command For physical machines , it retrieves the serial number and adds the prefix  (CCMT in my example) The user is informed that his device has received changes and that it will restart automatically in a few minutes. The script is available on Github :  Link Script integration & deployment Prerequisites The prerequisites are: Conve...
Read more »