Implementing CIS benchmark for macOS devices via Intune

[selva1709]

Hi,

We are trying to implement the CIS controls for macOS devices in our organization. All devices will be company provided and provisioned via Automated Device Enrollment program using Apple Business Manager.

Problem here is, most of the settings are not available via Intune. MS Support says those settings can be pushed via 'Shell scripts'. 

I would like to know if any of you have implemented this and to get some help on this.

Thanks

[#2]

@selva1709 Did you ever find an answer? I'd also be curious.

[#3 · Accepted solution]

You could use Jamf Compliance Editor to start with and make some changes to the scripts to make it work with Intune: https://trusted.jamf.com/docs/establishing-compliance-baselines

[#4]

Nope. We decided to leave all the settings that wasn't readily available in Intune config profiles.

[#5]

Thank you! Appreciate the help.