Skip to main content

Intune Setup (macOS)

Learn how to create and enforce Intune compliance policies for macOS devices so ComplyJet can evaluate compliance across enrolled devices.

Upendra Varma avatar
Written by Upendra Varma
Updated over a month ago

To sync macOS device compliance data from Intune into ComplyJet, you’ll first need to create the right compliance policies inside your Intune account. These policies help us detect and validate whether your devices meet security requirements.

Note: Without these compliance policies, even if you manually enable FileVault or screen lock on your Mac, the compliance checks will not pass. Always create and enforce a compliance policy in Intune.

Required Policies

ComplyJet checks for three specific things in Intune (macOS):

  • Disk Encryption (FileVault)

  • Screenlock / Auto-Lock

  • Antivirus (via installed apps)

1. Disk Encryption (FileVault)

Ensures that all macOS devices are encrypted with FileVault.

Steps:

  1. In Intune admin center, go to Devices → Compliance policies → Create policy.

  2. Select macOS as the platform.

  3. Under System Security, set Require encryption of data storage on device → Require.

  4. Assign to all macOS devices.

  5. Save and enforce.

2. Screenlock / Auto-Lock

Ensures inactive Macs automatically lock and require a password.

Steps:

  1. Create a new compliance policy for macOS.

  2. Under System Security, configure:

    • Require a password to unlock mobile devices → Require

    • Maximum minutes of inactivity before password is required → ≤ 15 minutes

  3. Assign to all macOS devices.

  4. Save the policy.

3. Antivirus

ComplyJet detects antivirus on macOS if a supported antivirus app appears in the Discovered Apps inventory reported by Intune.

Supported macOS antivirus apps include (not exhaustive):

  • Microsoft Defender

  • CrowdStrike Falcon

  • SentinelOne

  • Sophos Antivirus

  • ESET Antivirus

  • Malwarebytes

  • Carbon Black

  • Jamf Protect

  • McAfee Endpoint Security for Mac

If one of these is installed, the device will be marked as having antivirus.

Next Steps

Once these compliance policies are created and applied, connect Intune to ComplyJet.

ComplyJet will evaluate all the compliance policies attached to each macOS device and display the compliance status directly in your dashboard. This ensures you have a clear, centralized view of which macOS devices are compliant and which need attention.

Did this answer your question?