# Managed Apple Intelligence and external intelligence controls > Source-anchored research for Managed Apple Intelligence and external intelligence controls. Run status: COMPLETED. Parent: [Apple Intelligence](https://llms-explorer.com/tree/apple-intelligence/) · 4 facets · 12 facts · page: https://llms-explorer.com/tree/managed-apple-intelligence-and-external-intelligence-controls/ ## How it works - The external-intelligence declaration exposes `Enabled` and `AllowSignIn` booleans, both defaulting to true, plus `AllowedWorkspaceIDs`. Setting either boolean to false disables integrations or sign-in. The workspace list is currently limited to one ID; when present, it permits only that workspace and requires sign-in for supported integrations. Multiple declarations combine workspace IDs by set intersection. (high confidence) (verified as of 2026-09-17) — [source](https://support.apple.com/en-lamr/guide/deployment/depedd7d23ef/1/web/1.0) ## Problems, failure modes and limitations - Apple splits current management controls across `com.apple.configuration.intelligence.settings` for Apple Intelligence feature settings and `com.apple.configuration.external-intelligence.settings` for external integrations. Apple marks the corresponding legacy Restrictions keys, including `allowExternalIntelligenceIntegrations`, `allowExternalIntelligenceIntegrationsSignIn`, and `allowedExternalIntelligenceWorkspaceIDs`, deprecated from OS 26.4; Microsoft Intune also directs admins to use DDM for those controls on 26.4 and later. (high confidence) (verified as of 2026-09-17) — [source](https://support.apple.com/guide/deployment/apple-intelligence-declarative-configuration-dep9520d6032/web) - Apple publishes separate DDM declarations for built-in Apple Intelligence features and external intelligence integrations. External Intelligence Settings can disable integrations, disable sign-in, or limit requests to an allowed external workspace; Apple currently limits the allowlist to one workspace ID and requires sign-in for integrations that support it. (high confidence) (verified as of 2026-09-17) — [source](https://support.apple.com/en-lamr/guide/deployment/depedd7d23ef/1/web/1.0) - Apple's published Intelligence Settings include controls for Apple Intelligence Report, Genmoji, Image Playground, Image Wand, Personalized Handwriting Results, Visual Intelligence, and Writing Tools; app-specific controls cover Calendar, Mail, Notes, and Safari, with force-on-device-only options for dictation and translation. The September 2026 guide marks Visual Intelligence Summary as deprecated in favor of Visual Intelligence. (high confidence) (verified as of 2026-09-17) — [source](https://support.apple.com/guide/deployment/apple-intelligence-declarative-configuration-dep9520d6032/web) - Apple's older iPhone and iPad Restrictions table lists the legacy Allow external intelligence integrations key from iOS/iPadOS 18.2 as not requiring supervision at that time, while warning that a future release would require supervision and ignore the key on non-supervised devices. The older workspace-ID restriction was listed from iOS/iPadOS 18.3 and already required supervision. (high confidence) — [source](https://support.apple.com/en-au/guide/deployment/dep0f7dd3d8/1) - Microsoft's June 8, 2026 Intune release note says Apple deprecated intelligence-related Restrictions payload settings with OS 26.4 and directs administrators to DDM. CapaOne's live guide, checked on 2026-10-23, says equivalent legacy restrictions still work for now; neither source gives a removal date or guarantees later enforcement. (medium confidence) (verified as of 2026-10-23) — [source](https://learn.microsoft.com/intune/whats-new/) ## Comparisons and alternatives - Apple warns that each device-management service implements declarations differently and may not expose every setting. ManageEngine's September 16, 2026 macOS documentation and Citrix's external-intelligence policy documentation independently list controls for integration access, sign-in, and workspace IDs, so admins must verify support in their chosen MDM rather than infer it from Apple's schema alone. (high confidence) (verified as of 2026-10-23) — [source](https://support.apple.com/en-lamr/guide/deployment/depedd7d23ef/1/web/1.0) ## Facts and statements - Apple lists the external-intelligence declaration for iOS/iPadOS 26.4, macOS 26.4 device or user scope, and visionOS 26.4. It requires supervision, and Apple lists Automated Device Enrollment as the supported enrollment method. The schema allows system scope on iOS and visionOS and system or user scope on macOS; macOS user scope is distinct from User Enrollment, which Apple lists as unavailable for this declaration. (high confidence) (verified as of 2026-09-17) — [source](https://support.apple.com/en-lamr/guide/deployment/depedd7d23ef/1/web/1.0) - The separate `intelligence.settings` declaration manages feature-level choices such as Genmoji, Image Playground, Image Wand, Writing Tools, Apple Intelligence Report, and Visual Intelligence, plus app-specific settings for Calendar and Reminders, Mail, Notes, and Safari, and on-device-only dictation or translation. Exact keys and minimum OS versions vary by feature. Apple's published schema does not define a ChatGPT-specific key in `intelligence.settings`; external integrations use the separate external-intelligence declaration. (high confidence) (verified as of 2026-09-17) — [source](https://support.apple.com/guide/deployment/apple-intelligence-declarative-configuration-dep9520d6032/web) - An October 5, 2026 GitHub issue reports that a manually installed legacy Restrictions profile still appeared to disable some Apple Intelligence keys on one macOS 27.0 test Mac after Apple's deprecation date. The reporter warns that a later release may stop honoring the keys; this single test does not establish continued Apple support. (low confidence) (verified as of 2026-10-05) — [source](https://github.com/omlahore/RemoveMacAI/issues/5) - Apple's September 17, 2026 deployment pages list iOS 26.4, iPadOS 26.4, macOS 26.4, and visionOS 26.4 as minimum versions for both declarations, and require supervised devices. External Intelligence Settings lists Automated Device Enrollment only; Intelligence Settings lists Automated Device Enrollment and, for macOS, Device Enrollment. (high confidence) (verified as of 2026-09-17) — [source](https://support.apple.com/en-lamr/guide/deployment/depedd7d23ef/1/web/1.0) - The published enrollment lists imply there is no documented User Enrollment route for these DDM controls: external integrations list Automated Device Enrollment only, and Apple Intelligence feature controls add Device Enrollment only for Mac. This limits the published DDM path on unsupervised personal iPhone and iPad enrollments. (medium confidence) (verified as of 2026-09-17) — [source](https://support.apple.com/en-lamr/guide/deployment/depedd7d23ef/1/web/1.0)