Support macOS Version-Based Device Posture Check Rules Instead of OS Name Detection

Evan Merritt

During our recent session, we identified that macOS devices are currently classified under a generic “macOS” label after removing OS distribution-based checks (e.g., Tahoe, Sonoma, Sequoia).
While this resolves the immediate issue, it introduces a limitation in compliance granularity.
We are requesting support for:
 

  • macOS version-based detection (e.g., 14.x, 15.x, etc.)
  • Policy rules based on version thresholds (>=, <=, ranges)
  • Separation of OS family (macOS) from OS version attributes

This enhancement would provide:
 

  • More accurate and future-proof compliance enforcement
  • Reduced dependency on OS naming conventions
  • Improved consistency across macOS updates
  • Easier long-term policy maintenance at scale

This requirement was identified during a live session and agreed as a valuable product improvement opportunity.

Comments

0 comments

Please sign in to leave a comment.