Detections
Analytics
APPL-15-002180 - The macOS system must disable Find My service.
Information
The Find My service must be disabled.A Mobile Device Management (MDM) solution must be used to carry out remote locking and wiping instead of Apple's Find My service.
Apple's Find My service uses a personal AppleID for authentication. Organizations must rely on MDM solutions, which have much more secure authentication requirements, to perform remote lock and remote wipe.
Solution
Configure the macOS system to disable Find My service by installing the "com.apple.applicationaccess" and "com.apple.icloud.managed" configuration profiles.See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Apple_macOS_15_V1R7_STIG.zip
Item Details
Audit Name: DISA Apple macOS 15 Sequoia STIG v1r7
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-7a., CAT|II, CCI|CCI-000381, Rule-ID|SV-268525r1131237_rule, STIG-ID|APPL-15-002180, Vuln-ID|V-268525
Plugin: Unix
Control ID: c38241760919558331ff2fd6bd3abccaaa951ce3d03adeac336b8b71f83376b2