Maester Packs
LowScript packFree

CIS Apple iOS 26 and iPadOS26 Intune Benchmark

Checks that Intune policies configure the Level 1 recommendations of the CIS Apple iOS 26 and iPadOS 26 Intune Benchmark v1.0.0. One test per setting.

Version
0.1.0
Tests
55
Connectors
0
Published
7 Nov 2026

Pacers31Colts18 · pacers31colts18.cis-ios-intune-l1 · 0 stars · Open source · MIT

PowerShell 
Install-MtPack Pacers31Colts18/maester-packs-joeloveless/cis-ios-intune-l1

Install only packs from sources you trust. This pack is made by Pacers31Colts18, not by Maester. The site only indexes and scans it: Install-MtPack downloads it straight from github.com/Pacers31Colts18/maester-packs-joeloveless.

maester-packs.lock.json entry 
{  "Id": "pacers31colts18.cis-ios-intune-l1",  "Source": "Pacers31Colts18/maester-packs-joeloveless/cis-ios-intune-l1",  "Version": "0.1.0",  "Commit": "e9f51edda94c14f105b9079db5525af8814a7118",  "Digest": "sha256:7f12e65bdff17a7839fd207cd02d3b116d84ed111f338561bde053ee06142c97"}

← All tests

MP.JL.CISIOSINT.L1.021 Block Apple Watch auto unlock is set to Yes

Severity: MediumGraph

Description

CIS Apple iOS 26 and iPadOS 26 Intune Benchmark, recommendation 3.4.3 (Level 1).

The test passes when an assigned configuration profile sets Device Restrictions > Connected Devices > Block Apple Watch auto unlock to Yes, and no other assigned policy sets it to something else.

Remediation action

  1. In the Microsoft Intune admin center, go to Devices > Configuration and open the configuration profile.
  2. Set Device Restrictions > Connected Devices > Block Apple Watch auto unlock to Yes.
  3. Assign the profile to your devices, and remove any other assigned profile that sets it to something else.

%TestResult%