Known issue: macOS devices using stealth mode turn non-compliant after upgrading to macOS 15

We have recently received a warning that some macOS devices may become noncompliant after upgrading to macOS 15 if Stealth Mode is enabled in the device compliance policy. This setting is located in the macOS compliance policy: System Security. When Stealth Mode is enabled, your Mac device will not respond to “ping” requests or connection attempts on closed TCP or UDP networks. Stealth Mode can be configured via a compliance policy or by configuring the firewall via the Settings Catalog.

A screenshot of the Microsoft Intune admin center for macOS compliance policies.

After upgrading your device to macOS 15, you may see an error in the Enable Stealth Mode setting, reporting a noncompliant status.

Error screen capture of the Stealth Mode Activation Settings.

How to solve
If you experience issues with your device becoming noncompliant after upgrading to macOS 15, you can mitigate this by configuring the Stealth Mode settings as follows: Not configured For devices running macOS 15 or later:

Screenshot of Not configured for Stealth Mode in the Intune Admin Center UI.

When you set stealth mode Not configured You can enable stealth mode on your devices by configuring a device configuration policy in the Device Compliance Policy. This setting is in the macOS Settings catalog. Networking > fire door:

Here’s a screenshot of where to enable stealth mode in the firewall settings selector.

Here is a screenshot of Stealth Mode enabled in Firewall settings.

Additionally, you can configure the following to prevent your device from upgrading to macOS 15: Limit software update delays In the Settings catalog. This will prevent macOS 15 from being offered on your device for a specified period of time.

Here’s a screenshot of where to delay software updates.

We will continue to update this post as new information becomes available. If you have any questions or comments for the Intune team, please reply to this post or contact X. @IntuneSoupTeam.