Chapter materials

As with Chapters 2, 5, and 6, this will not cover all available policy types, so we will run through them all now to get a better understanding of what is available for macOS devices. As with Windows and iOS, macOS policy settings have now been largely migrated to the settings catalog.

The available profile types are as follows:

• Settings catalog: The unified settings catalog is a more modern way to deploy settings.
• Custom: This lets you upload a .mobileconfig file created in Profile Manager to configure settings not yet available elsewhere. We will cover this briefly in the following shell scripts recipe. Some examples can be found here: https://github.com/microsoft/shell-intune-samples/tree/master/macOS.
• Device restrictions: These are an alternative to the settings catalog for your standard restrictions.
• Device features: Device restrictions are used to protect and lock down devices. Device features set various custom settings, such as lock...