The Apple Tracking Policy allows administrators to monitor and manage critical device tracking events on macOS systems.
This policy enhances visibility into device actions such as USB connection activity, device lock events, and device wipe actions, helping IT teams maintain better audit trails and compliance oversight.
Overview
The Apple Tracking Policy can be configured from the Swif Admin Console → Policies → Create New Policy section.
It supports macOS 12.0 and later and can be applied to individual devices or device groups.
Policy Description
This policy is used to manage device tracking activity on Apple endpoints. Administrators can choose to enable or disable tracking for USB devices, lock events, and wipe actions.
These settings are particularly useful for security audits, compliance monitoring, and forensic analysis in case of data incidents.
Requirements
Minimum OS version: macOS 12.0+
Device Enrollment: Managed via Swif.ai MDM
Permissions: Admin-level access to the Swif console
Configurable Settings
Setting | Description | Minimum Requirement |
USB Tracking | When enabled, logs USB device connection activity (e.g., external drives or peripherals). Useful for auditing data access and identifying unauthorized connections. | macOS 12.0+ |
Device Lock Tracking | When enabled, records lock events to help monitor device inactivity and user session behavior. | macOS 10.0+ |
Device Wipe Tracking | When enabled, logs any system wipe actions, including remote wipes issued through MDM. This ensures accountability and post-wipe audit verification. | macOS 10.0+ |
Best Practices
Enable USB Tracking in high-security environments where removable media usage must be monitored.
Use Device Lock Tracking to correlate inactivity patterns with compliance and security rules.
Keep Device Wipe Tracking enabled for audit logging in case of stolen, decommissioned, or offboarded devices.
How to Apply
Navigate to the Swif Admin Console → Policies.
Click Create New Policy → Apple Tracking Policy.
Configure desired tracking settings (USB, Lock, Wipe).
Assign the policy to selected devices or device groups.
Review and confirm to apply the policy.
Once enforced, tracking data becomes available through Device → History → Actions in the Swif dashboard.
Compliance and Security Benefits
Provides visibility into data movement through external devices.
Helps identify potential policy violations or data exfiltration risks.
Supports audit readiness for frameworks like SOC 2, ISO 27001, and HIPAA.
References
✅ Tip:
Combine this policy with the Apple USB Policy for a complete endpoint tracking and control strategy.