Policies/

Ensure Apple Intelligence is disabled

Allen Houchins

This policy detects if Apple Intelligence is disabled.

Control

Create or edit a configuration profile with the following information:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
  <key>PayloadContent</key>
  <array>
    <dict>
      <key>PayloadDisplayName</key>
      <string>Restrictions</string>
      <key>PayloadIdentifier</key>
      <string>com.apple.applicationaccess.B0BBE2AE-80C3-4182-9934-2A08ECED7DB4</string>
      <key>PayloadType</key>
      <string>com.apple.applicationaccess</string>
      <key>PayloadUUID</key>
      <string>B0BBE2AE-80C3-4182-9934-2A08ECED7DB4</string>
      <key>PayloadVersion</key>
      <integer>1</integer>
      <key>allowGenmoji</key>
      <false/>
      <key>allowImagePlayground</key>
      <false/>
      <key>allowWritingTools</key>
      <false/>
    </dict>
  </array>
  <key>PayloadDisplayName</key>
  <string>Disable Apple Intelligence</string>
  <key>PayloadIdentifier</key>
  <string>com.example.disable_apple_intelligence</string>
  <key>PayloadOrganization</key>
  <string>Example Payload Organization</string>
  <key>PayloadRemovalDisallowed</key>
  <false/>
  <key>PayloadType</key>
  <string>Configuration</string>
  <key>PayloadUUID</key>
  <string>B3EAD179-9679-4B08-A421-4B03D081C5DC</string>
  <key>PayloadVersion</key>
  <integer>1</integer>
</dict>
</plist>

Create or edit the following script and configure it to run when the check fails:

Check

Use the policy below to verify:

Query PowerShellNEW BashNEW

SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM plist WHERE path LIKE '/Users/%/Library/Preferences/com.apple.CloudSubscriptionFeatures.optIn.plist' AND value = 1);