fleet/docs/solutions/cis/macos-13/configuration-profiles/2.8.1-enable.mobileconfig
Claude d3a00310d9
Fix spelling, naming conventions, and policy-profile alignment
Apple Intelligence policy-profile alignment (HIGH):
- Fix 3/4 policy queries that checked fabricated MDM keys which
  would never match the corrected profiles:
  - extensions: allowIntelligenceExtensions -> allowExternalIntelligenceIntegrations
  - mail: com.apple.mail/allowMailIntelligence -> com.apple.applicationaccess/allowMailSummary
  - notes: com.apple.mobilenotes/allowNotesIntelligence -> com.apple.applicationaccess/allowNotesTranscriptionSummary
- Update resolution text to reference correct keys and domains
- Fix Title Case in policy names (MDM Required, not MDM required)

Spelling fixes across all macOS and Windows YAML (14 corrections):
- existance -> existence, Extention -> Extension,
  recomendation -> recommendation, bellow -> below,
  enableds -> enables, addess -> address
- Missing spaces: SelectGeneral, SelectSharing, OpenSystemSettings
- Grammar: "is not Activate" -> "is not Active"
- Doubled word: "Computer Computer Configuration"
- Missing space: "thatis" -> "that is"

Naming consistency:
- Rename 2.8.1.disable/enable -> 2.8.1-disable/enable (match dash
  convention used by all other suffixed profiles)
- Fix win-10 local-security-options.xml header: Section 2.3.1 -> 2.3
- Add CIS control numbers to win-11-intune local-security-options.xml
  comments (was missing, unlike all other XML files)
- Fix win-10/win-11 PS1: add S-1-5-113 (Local account) to CIS 2.2.16
  and 2.2.20 deny entries to match XML profiles

https://claude.ai/code/session_01DUqJK6iJ8MWMdz2d25ZTNW
2026-04-16 12:19:37 +00:00

37 lines
1.1 KiB
XML

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>PayloadContent</key>
<array>
<dict>
<key>PayloadDisplayName</key>
<string>test</string>
<key>PayloadType</key>
<string>com.apple.universalcontrol</string>
<key>PayloadIdentifier</key>
<string>com.fleetdm.cis-2.8.1.check-enabled</string>
<key>PayloadUUID</key>
<string>F39058CB-027B-453D-B2DF-414F9B84D241</string>
<key>Disable</key>
<false/>
</dict>
</array>
<key>PayloadDescription</key>
<string>test</string>
<key>PayloadDisplayName</key>
<string>Ensure Universal Control is enabled</string>
<key>PayloadIdentifier</key>
<string>com.fleetdm.cis-2.8.1-enabled</string>
<key>PayloadRemovalDisallowed</key>
<false/>
<key>PayloadScope</key>
<string>System</string>
<key>PayloadType</key>
<string>Configuration</string>
<key>PayloadUUID</key>
<string>ECC41516-FFD8-4321-9696-63B1939CB956</string>
<key>PayloadVersion</key>
<integer>1</integer>
</dict>
</plist>