From 650680689e627cabf4b42bcf2ff4b66bc52ec26e Mon Sep 17 00:00:00 2001
From: Allen Houchins <32207388+allenhouchins@users.noreply.github.com>
Date: Tue, 16 Sep 2025 21:02:25 -0500
Subject: [PATCH] Update personal-mobile-devices.yml (#33093)

- Require end user authentication for profile-based BYOD enrollment
---
 it-and-security/teams/personal-mobile-devices.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/it-and-security/teams/personal-mobile-devices.yml b/it-and-security/teams/personal-mobile-devices.yml
index acd1079e1f..93eb7dfeeb 100644
--- a/it-and-security/teams/personal-mobile-devices.yml
+++ b/it-and-security/teams/personal-mobile-devices.yml
@@ -20,6 +20,8 @@ controls:
   macos_settings:
     custom_settings:
       - path: ../lib/ios/declaration-profiles/Passcode settings.json
+  macos_setup:
+    enable_end_user_authentication: true
   scripts:
 policies:
 queries: