Rule version APPL-26-005170 · STIG v1 · 2026-09-01
The prompt for Apple Intelligence setup during Setup Assistant must be disabled.
Disabling Apple watches is a necessary step to ensuring the information system retains a session lock until the user reestablishes access using authorized identification and authentication procedures.
Verify the macOS system is configured to skip Apple Intelligence during Setup Assistant with the following command:
/usr/bin/osascript -l JavaScript 2>/dev/null << EOS $.NSUserDefaults.alloc.initWithSuiteName('com.apple.SetupAssistant.managed')\ .objectForKey('SkipSetupItems').containsObject("Intelligence") EOS
If the result is not "true", this is a finding.
Configure the macOS system to skip Apple Intelligence during Setup Assistant by installing the "com.apple.SetupAssistant.managed" configuration profile.