Skip to content
Trending
Simplify Windows Devices to Run Only the Required Applications using Intune Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune MS Intune Adds Windows Registry Data Collection to Device Inventory for Single Values All Key Values and Subkeys Updated Windows Device Sync Experience Enhances Per-Device Troubleshooting Configure Windows Sandbox vGPU Policy using Intune for Better Graphics Performance or Reduced Attack Surface Simplify Windows Devices to Run Only the Required Applications using Intune Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune MS Intune Adds Windows Registry Data Collection to Device Inventory for Single Values All Key Values and Subkeys Updated Windows Device Sync Experience Enhances Per-Device Troubleshooting Configure Windows Sandbox vGPU Policy using Intune for Better Graphics Performance or Reduced Attack Surface
Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune

Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune

Written By Anoop C Nair
Last Updated July 30, 2026
Posted In Intune
SHARE

Key Takeaways

  • Organizations can create custom compliance requirements that go beyond the built-in macOS compliance settings.
  • Discovery scripts and JSON rules can be used to evaluate specific device attributes and conditions.
  • Administrators can check installed applications, running processes, app versions, and custom security configurations.
  • The feature helps organizations enforce business-specific security and compliance requirements on macOS devices.

In this post we are discussing about Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune. Microsoft has announced the general availability of Custom Compliance Settings for macOS in Microsoft Intune. The feature helps organizations strengthen security controls while supporting many types of macOS management scenarios. However, every organization may have different security, and compliance needs that are not covered by the default compliance settings.

Table of Contents

Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune

Some companies may need to check for specific applications, custom security configurations. To address this, Microsoft Intune allows administrators to use custom compliance checks for macOS devices. By using custom scripts and compliance settings, organizations can evaluate additional requirements.

With custom compliance settings, IT administrators can define their own compliance checks using discovery scripts and JSON-based rules. For create custom compliance policy you have to navigate through Devices > Compliance > +Create Select Platform as macOS and profile type as Mac compliance policy.

Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune - Fig.1
Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune – Fig.1

What’s New in macOS Custom Compliance Settings

Custom Compliance Settings for macOS are now generally available in Microsoft Intune. Administrators can create organization-specific compliance requirements that go beyond the default compliance settings provided by Apple and Intune. This allows businesses to validate additional security controls and operational standards that are important to their environment.

Patch My PC

The feature uses discovery scripts to collect information from managed macOS devices and JSON rules to evaluate the collected data. Based on the defined criteria, Intune determines whether a device is compliant or noncompliant and can enforce Conditional Access policies accordingly.

  • Microsoft Intune now supports Custom Compliance Settings for macOS, allowing administrators to upload a discovery script and JSON rules to evaluate device-specific compliance requirements.
  • This helps organizations check security settings, applications, and other device conditions that are not covered by built-in compliance policies.
  • Intune uses the collected device data to determine compliance status, helping organizations enforce custom security requirements and strengthen compliance management for macOS devices.
What’s NewDetails
Custom compliance for macOSNow generally available; admins can enforce org‑specific requirements beyond Apple’s built‑in settings.
Extended coverageAligns compliance with Conditional Access
Discovery scripts + JSON rulesInspect attributes Apple doesn’t expose
Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune – Table.1
Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune - Fig.2
Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune – Fig.2

More Device Attributes and Conditions

One of the major advantages of custom compliance settings is the ability to inspect a range of device attributes. Administrators can use discovery scripts to gather information that is not available through standard compliance settings.

Reference

What’s new in Microsoft Intune – July

Need Further Assistance or Have Technical Questions?

Join the LinkedIn Page and Telegram group to get the latest step-by-step guides and news updates. Join our Meetup Page to participate in User group meetings. Also, join the WhatsApp Community  and the WhatsApp channel to get the latest news on Microsoft Technologies. We are there on Reddit as well.

Author

Anoop C Nair is a Workplace Technology solution architect with 25+ years of experience. Microsoft Certified Trainer. Microsoft MVP from 2015 onwards for consecutive 11+ years! He is a blogger, Speaker, and Founder of HTMD Community and HTMD Conference. His main focus is on Device Management technologies like Intune, Windows, and Cloud PC. He writes about technologies like Intune, SCCM, Windows, Cloud PC, Entra, and Microsoft Security.

Written by

Anoop C Nair is Workplace Technology solution architect with 25+ years of experience in global enterprise organizations such as JP Morgan, Capgemini, etc. Microsoft Certified Trainer. Microsoft MVP from 2015 onwards for consecutive 11+ years! He also conducts Intune and modern workplace tech training for enterprise organizations. He is Blogger, Speaker, and Founder of HTMD Community and HTMD Conference. His main focus is on Device Management technologies like Intune, Windows, Cloud PC. He writes about technologies like Intune, SCCM, Windows, Cloud PC, Windows, Entra, Microsoft Security.

Discussion

Join the discussion

Your email address will not be published. Required fields are marked *

Related guides

Intune

Simplify Windows Devices to Run Only the Required Applications using Intune

Key Takeaways Hey, let’s learn about Simplify Windows Devices to Run Only the Required Applications using Intune. This policy lets administrators replace the default windows shell with a custom or lightweight shell. it improves performance by using system resources and is useful for devices that run a dedicated application. If the policy is disabled or […]

AC Anoop C Nair 8 min read
Intune

Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune

Key Takeaways In this post we are discussing Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune. Microsoft Intune has received a new update that expands firmware management capabilities for Samsung Galaxy devices through Firmware Versionsintegration. This enhancement gives IT administrators more control over firmware and operating system updates, helping them […]

AC Anoop C Nair 4 min read
Intune

MS Intune Adds Windows Registry Data Collection to Device Inventory for Single Values All Key Values and Subkeys

Key Takeaways Microsoft Intune 2607 introduces Windows Registry Data collection in Device Inventory, allowing IT admins to verify actual device configurations without relying on custom discovery or remediation scripts. Using the Properties Catalog, admins can collect registry information through Single Value, All Values Under a Key (Non-Recursive), or Same Value Across Subkeys. MS Intune Adds […]

AC Anoop C Nair 5 min read
Intune

Updated Windows Device Sync Experience Enhances Per-Device Troubleshooting

Key Takeaways The updated Windows device sync experience in the Microsoft Intune admin center helps you provide live sync progress. It gives admins better visibility into every stage of the synchronisation process. Instead of waiting without feedback, admins can monitor each step in real time. It makes it easier to confirm that the sync is […]

AC Anoop C Nair 4 min read