com.apple.mail.managed #53

Open
opened 2026-01-19 18:29:03 +00:00 by michael · 0 comments
Owner

Originally created by @robertgendler on GitHub.

These rules use the domain com.apple.mail.managed on the iOS 18 branch

os_exchange_mail_recents_sync_disable
os_exchange_SMIME_signing_enabled
os_exchange_SMIME_encryption_default_certificate_overwrite_enable
os_mail_maildrop_disable
os_exchange_prevent_move_enforce
os_exchange_SMIME_encryption_certificate_overwirte_disable
os_exchange_peraccountVPN
os_mail_move_messages_disable
os_exchange_SMIME_encryption_per_message_disable
os_exchange_SMIME_signing_certificate_overwirte_disable
os_exchange_SMIME_signing_overwrite_disable

According to
7d4ba1a2bd/mdm/profiles/com.apple.mail.managed.yaml (L53)

  • key: EmailAccountType
    title: Account Type
    type:
    presence: required
    rangelist:
    • EmailTypeIMAP
    • EmailTypePOP
      content: Defines the protocol to use for the account.
  • key: EmailAddress
    title: Email Address
    type:
    presence: optional
    content: The full email address for the account. If this string isn't present in
    the payload, the device prompts the user for this string during interactive profile
    installation in Settings or System Preferences.

Test when pushing from MDM server as these mail fail to deploy without the key EmailAccountType

Originally created by @robertgendler on GitHub. These rules use the domain com.apple.mail.managed on the iOS 18 branch os_exchange_mail_recents_sync_disable os_exchange_SMIME_signing_enabled os_exchange_SMIME_encryption_default_certificate_overwrite_enable os_mail_maildrop_disable os_exchange_prevent_move_enforce os_exchange_SMIME_encryption_certificate_overwirte_disable os_exchange_peraccountVPN os_mail_move_messages_disable os_exchange_SMIME_encryption_per_message_disable os_exchange_SMIME_signing_certificate_overwirte_disable os_exchange_SMIME_signing_overwrite_disable According to https://github.com/apple/device-management/blob/7d4ba1a2bde50a4053fa5a5e0ed6c17388d82ab2/mdm/profiles/com.apple.mail.managed.yaml#L53 - key: EmailAccountType title: Account Type type: <string> presence: required rangelist: - EmailTypeIMAP - EmailTypePOP content: Defines the protocol to use for the account. - key: EmailAddress title: Email Address type: <string> presence: optional content: The full email address for the account. If this string isn't present in the payload, the device prompts the user for this string during interactive profile installation in Settings or System Preferences. Test when pushing from MDM server as these mail fail to deploy without the key EmailAccountType
Sign in to join this conversation.
No Label
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: usnistgov/macos_security#53