What
Claude Code can now read enterprise-managed configuration policies from platform-native MDM (Mobile Device Management) sources, enabling IT administrators to enforce organizational settings.
Details
- macOS: Reads managed preferences from
/Library/Managed Preferences/com.anthropic.claudecode.plist(device-level and per-user) - Windows: Reads registry keys from
HKLM\SOFTWARE\Policies\ClaudeCodeandHKCU\SOFTWARE\Policies\ClaudeCode - Falls back to file-based managed settings (
managed-settings.json) on other platforms - Polls for MDM settings changes every 30 minutes and applies updates live
- Settings are parsed through the same Zod schema validation as regular settings
Evidence
Domain identifier "com.anthropic.claudecode", registry paths "HKLM\\SOFTWARE\\Policies\\ClaudeCode", function pE1() reads platform-specific MDM sources (search for "com.anthropic.claudecode")
Strings lifted out of the shipped bundle, so the claim above can be checked against them.