Modern Management Summit 2026 From Zero-Touch to Zero-Trust Managing... - MEMSummit26 From Zero-Touch to Zero-Trust Managing macOS with Intune light.pdf

1、From Zero-Touch to Zero-Trust:Managing macOS with IntuneBy Marc NahumSponsors Michael ScottMicrosoft MVP Endpoint&SecurityRoleManagerFocusIntune Windows 365 SecurityBlog,Hobbies and moreBeing awesomeMarc NahumMarc NahumMicrosoftRoleIntune Senior Product ManagerFocusApple devices managed by IntuneBlo

2、g,Hobbies and moreA young labrador macOS managementRoadmap,migration,CopilotSecurity,Standard userRecovery lock,LAPS,DDMSimple or notPlatform SSOAgendaTools for next stepsFrom chaos to controlFrom chaos to controlFrom chaos to controlThe Microsoft Secure Productivity Stack on macOSPRODUCTIVITYM365+C

3、opilotWord Excel Outlook TeamsVS Code Copilot for M365DATAMicrosoft PurviewSensitivity Labels Endpoint DLPInformation Protection Insider riskTHREATMicrosoft DefenderEDR Vulnerability ManagementAnti-malware Real-time ProtectionMANAGEMENTMicrosoft IntuneZero-Touch Enrolment with LAPS ADE/ABMDDM MDM Mi

4、gration ComplianceIDENTITYMicrosoft Entra IDPlatform SSO Enterprise SSOConditional Access MFAOPERATING SYSTEMmacOSSecure Enclave SIP GatekeeperNative MDM Apple SiliconFew questions?Who have Macs in his enterprises?Who managed them?Who managed them with Intune?Who still have the users as permanent ad

5、mins?Intune macOS capabilities:Recent updatesPin web clips to dockSettings Catalog+Defender policy enhancementsmacOS Sonoma supportDDM software UpdateAug-Oct 23Defender policy enhancementsSettings Catalog+Custom PKG supportDate picker for DDM software updatesDMG and PKG size increase to 8GBNov-Jan 2

6、4Await final configLocal account managementCustom PKG Pre+Post-install scriptsSettings Catalog+Cloud PKI support+Remote HelpFeb-Apr 24Platform SSO public previewCompany Portal supports DMG and PKGACME protocol supportSettings Catalog+View recovery key in Company PortalMay-Jul 24Sequoia day-zero sett