BaselineWatch
Desk

os_image_generation_disable Disable AI Image Generation

NIST macOS Security Compliance Project Sequoia Guidance, Revision 4.0 (be5491f)
All changes in this version
first version loaded macOS

Title

Disable AI Image Generation

Control

/usr/bin/osascript -l JavaScript << EOS
$.NSUserDefaults.alloc.initWithSuiteName('com.apple.applicationaccess')\
.objectForKey('allowImagePlayground').js
EOS

Discussion

Apple Intelligence features that use off device AI _MUST_ be disabled.

Related controls

ac-20, ac-20.1, cm-7, cm-7.1, sc-7.10

Fix

This is implemented by a Configuration Profile.