Microsoft 365 Endpoint AdministratorManage devices and apps (55-60%)Hard
A Microsoft 365 Endpoint Administrator wants to prevent users on corporate-owned macOS devices from installing applications from any source other than the Mac App Store. This is a strict security requirement. Which Intune policy setting should be configured?
- AmacOS device configuration profile > Custom settings > OMA-URI
- BmacOS device compliance policy > Require app store installation
- CmacOS device restrictions profile > App Store, Doc Viewing, Gaming > Require Mac App Store
- DmacOS Endpoint security policy > Application control
Show answer & explanationAnswer & explanation
Correct answer: C. macOS device restrictions profile > App Store, Doc Viewing, Gaming > Require Mac App Store
The 'macOS device restrictions profile' contains a specific setting under 'App Store, Doc Viewing, Gaming' called 'Require Mac App Store' which, when enabled, restricts app installations to only those from the official Mac App Store, effectively preventing sideloading or installation from unknown sources.
Why the other options are wrong
- A. While OMA-URI can configure custom settings, this specific restriction is directly available in a built-in device restrictions profile, making OMA-URI an unnecessary and complex alternative.
- B. Compliance policies *report* on device status, they do not *enforce* settings like restricting app sources.
- D. Endpoint security policies focus on features like antivirus and firewall, and while application control exists in some platforms, the specific Mac App Store restriction is in device restrictions for macOS.
Intune macOS App Source Restriction
A setting within macOS device restrictions profiles in Microsoft Intune that restricts users to installing applications only from the official Mac App Store, enhancing device security.
- Prevents installation of apps from 'Anywhere' or 'Identified Developers'.
- Enhances security by limiting software sources.
- Located under 'App Store, Doc Viewing, Gaming' settings.
Memory trick: Mac Apps Must Be Store-Approved.