Detections
Analytics
APPL-14-002180 - The macOS system must disable Find My service.
Information
The Find My service must be disabled.A Mobile Device Management (MDM) solution must be used to carry out remote locking and wiping instead of Apple's Find My service.
Apple's Find My service uses a personal AppleID for authentication. Organizations should rely on MDM solutions, which have much more secure authentication requirements, to perform remote lock and remote wipe.
Solution
Configure the macOS system to disable Find My service by installing the "com.apple.applicationaccess" configuration profile.See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Apple_macOS_14_V2R4_STIG.zip
Item Details
Audit Name: DISA Apple macOS 14 Sonoma STIG v2r4
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-7a., CAT|II, CCI|CCI-000381, Rule-ID|SV-259526r958478_rule, STIG-ID|APPL-14-002180, Vuln-ID|V-259526
Plugin: Unix
Control ID: e3f637924531a0c7e473300866ac92123eb677f0491855ce6876e26c0d479a2b