Functionality Restriction Settings for ios

Size: px

Start display at page:

Download "Functionality Restriction Settings for ios"

Justina Dawson
6 years ago
Views:

1 This article refers to devices running ios 7.0 or higher, except where noted. Go to the Device Config > Profiles. Add or edit a profile. On the Basic tab, go to Functionality Restrictions. Click ios Specific Functionality Restrictions to set the following options: Device Functionality Select the device functionality options for most ios devices: Allow Video Conferencing (FaceTime) Allows users to make video calls. Note that Allow Camera must be set to Yes. Allow Automatic Sync While Roaming For cellular devices, allows application syncing when a device is roaming. Allow Voice Assistant (Siri) Allows users to use voice commands to operate ios applications. Allow Voice Assistant While Locked Allows users to activate Siri, even if passcode is locked. (If no device passcode is set, this option is ignored.) Allow Assistant User Generated Content Allows users to activate Siri to query usergenerated content from the Internet or device. (Supervised mode only.) Allow Voice Dialing For cellular devices, allows users to place calls using voice commands. Allow Passbook While Locked (ios 6 and higher) Allows users to receive Passbook notifications when device screen is locked. Allow In-App Purchases Allows users to make purchases within an application. Force User to Enter Password on All Purchases Forces users to enter their itunes password each time an itunes purchase is made from the device. Allow Fingerprint Unlock Allows users to use Touch ID to unlock their device. Allow Lock Screen Control Center Allows the Control Center to display on a locked screen. Allow Lock Screen Notifications Allows the Notifications view in the Notification Center to display on a locked screen. Allow Lock Screen Calendar Allows a Calendar to display on a locked screen. Force Password for Device Pairing Forces all devices receiving AirPlay requests from this device to use a paring password. Available on iphone 4s and later, and ipad 2 and later. Allow Activity Continuation Allows users to hand off an activity to a different device. Allow Enterprise Book Backup Allows users to back up Enterprise books. Allow Enterprise Book Syncs When selected, Enterprise books are synchronized with icloud. Force Apple Watch Wrist Detection (ios 8.2 and higher) Only enables notifications to be sent when an Apple Watch is being worn on a wrist. Supervised Device Settings These options apply to most ios devices in Supervised mode only. Select the options you want to allow: Allow imessage Allows users to text using imessage. Allow AirDrop Allows users to share files between ios devices using AirDrop. Enable Assistant Profanity Filter Allows users to select the profanity filter level. Allow Configuration Profile Installation (ios 6 and higher) Allows the Barracuda Mobile Device Manager administrator to enroll multiple ios devices using Apple Configurator. For more information, see the SETTINGS > Enrollment page. Allow Account Modification Allows users to modify their device account. Allow Find Friends Modification Allows users to modify their Find My Friends settings. For example, set automatic notifications. Allow Host Pairing Allows administrator to control which devices an ios 7 or higher device can 1 / 5

2 pair with. If Allow Host Paring is set to Yes, then devices can pair with any other device. If Allow Host Pairing is set to No, then Apple Configurator supervised devices can only pair with their supervision host and DEP supervised devices can only pair with hosts which have a Supervising Host Certificate specified in the Apple DEP configuration settings. For additional details, refer to Understanding Supervising Host Certificates and Host Pairing. Note: If Host Paring is disabled during supervision than that setting cannot be overridden here. Allow Podcasts Allows users to download podcasts to the device. Allow Internet Result Searching When selected, users can search for Internet content using Spotlight. Allow Enabling Restrictions Allows users to set a password to restrict the device. Allow Definition Lookup When selected, users can highlight a word and tap to retrieve definitions. Allow Predictive Keyboard When selected, the keyboard displays words and phrases as the user types, based on past conversations and writing style. Allow Auto Correction Allows content to be automatically corrected as it is entered. Allow Spellcheck Allows device to automatically spell-check as the user types Consider AirDrop to be an Unmanaged Target Forces AirDrop to be considered an unmanaged drop target. Supervised Device Settings These options apply to ios devices in Supervised mode only. Select the options you want to allow: Allow Text Replacement Allow user to use text replacement, formerly known as keyboard shortcuts, to speed text input. Allow Apple Watch Pairing (ios 9.0 and higher) Allows user to pair their Apple Watch with their mobile device. Any currently paired Apple Watch is unpaired and erased. Allow Passcode Modification Allows user to add, change, and remove their passcode. Allow Device Name Modification Allows user to modify their device name. Allow Wallpaper Modification Allows user to modify device's wallpaper. Allow itunes Radio Allows user to listen to itunes Radio. Allow Notification Modification Allows user to change how their device receives notifications. Allow Music Service Allows user to use Music service. If set to No, Music service is disabled and Music app reverts to classic mode. Allow Remote Screen Observation Supervised only. If set to false, remote screen observation by the Classroom app is disabled. Defaults to true. This key is a sub-restriction of allowscreenshot. If allowscreenshot is set to false, it also prevents the Classroom app from observing remote screens. Allow Diagnostic Submission Modification If set to false, the diagnostic submission and app analytics settings in the Diagnostics & Usage pane in Settings cannot be modified. Defaults to true. Application Functionality Select the application-specific restrictions for most ios devices: Allow Installing Apps Allows users to install applications on their device. If not selected, the Apple App Store is disabled, and users cannot install or update apps on their device. Allow itunes Store Allows users to use the itunes Store on their device. Allow YouTube (ios version 5 only) Allows users to use YouTube on the device. Allow Game Center (ios 6 and higher in Supervised mode only) Allow Multiplayer Gaming Allows games with more than one player. Allow Adding Game Center Friends Allows users to add game center friends. Allow Browser (Safari) Allow users to use Safari on the device. When selected, specify the following options: 2 / 5

3 Enable Browser Autofill Enables autofill to automatically populate standard fields in forms in Safari. Force Fraud Warning Enables anti-phishing detection. When a suspected site is encountered, a warning displays on the device. Enable Browser JavaScript Allows JavaScript to run in Safari. Block Browser Popups Enables pop-up blocker. Accept Cookies Select whether to accept cookies Always, Never, or Only from visited sites. Allow Open Documents From Managed to Unmanaged Apps Allows users to open managed application documents in unmanaged applications. Allow Open Documents From Unmanaged to Managed Apps Allows users to open unmanaged application documents in managed applications. Supervised Device Settings These options apply to most ios devices in Supervised mode only. Select the options you want to allow: Allow ibookstore Allows users access to ibookstore. Allow Cellular Data Usage by Apps Allows applications to use cellular data. Allow News Allows user access to Apple News app. Allow Automatic Download of Apps Purchased on Other Devices Allows automatic download of apps purchased on other devices. Does not affect updates to existing apps. Single Application Mode This option applies only when the ios device is in Supervised mode. Select either Application Lock or Autonomous Single Application as the application mode: Application Lock Allows you to select a managed application to which to lock all ios 7 or higher devices. After you select the application, specify the application lock options you want to enable: Disable Touch Screen Disable Device Rotation Disable Volume Buttons Disable Ringer Switch Disable Sleep/Wake Button Disable Auto Lock Enable Speak Selection Enable Mono Audio Enable VoiceOver / Enable VoiceOver Adjustment Enable Zoom / Enable Zoom Adjustment Enable Invert Colors / Enable Invert Color Adjustment Enable AssistiveTouch / Enable AssistiveTouch Adjustment Autonomous Single Application Mode Allow applications to autonomously enter Single App Mode. Use the Search tools to refine the list of applications, and then turn on Allow to the right of the applications you want to permit to autonomously enter Single App Mode. Note that if you attempt to install or remove applications from devices in Single Application Mode, the devices will become unresponsive and will need to be wiped. 3 / 5

4 icloud Select the icloud-specific options for most ios devices: Allow icloud Backups Allows device to back up application data to icloud. Allow Photo Stream Allows Photo Stream use. Allow Shared Photo Stream Allows shared Photo Stream. Allow Key Chain Sync Allows Cloud key chain synchronization. Allow Managed Application Cloud Storage Allows managed applications to use cloud sync. Allow icloud Document Sync Allows document and key-value syncing to icloud. Allow icloud Photo Library Allows device to connect to icloud Photo Library. Security and Privacy Select the security and privacy options for most ios devices: Allow Sending Diagnostic Data (ios 6 and higher) Allows devices to automatically submit diagnostic reports to Apple Computer. Allow User To Accept Untrusted TLS Certificates Allows user to determine whether to accept untrusted HTTPS certificates. If not selected, the device automatically rejects untrusted HTTPS certificates. Force Encrypted Backups Forces encryption on backups. Allow Over the Air PKI Updates Allows root certificate changes over the air (OTA). Note that when this option is not selected, the restriction does not disable CRL and OCSP checks. Force Limit Ad Tracking Forces limited targeted ad tracking by advertisers. Content Ratings Specify content rating controls: Allow ibookstore Erotica (ios 6.1 in Supervised mode only) When set to Yes, users can access erotic content on the ibookstore from the device. Allow ibookstore must be selected in the Applications section. Allow Explicit Music and Podcasts Allows users to download and listen to music and podcasts rated Explicit. Ratings Region Select the ratings restrictions locale to apply to mobile devices. Movies Select the maximum movie rating level allowed on the device. TV Shows Select the maximum television show rating level allowed on the device. Applications Select the maximum application rating level allowed on the device. 4 / 5

5 5 / 5

Supervised only configuration Profile Key Reference

Supervised only configuration Profile Key Reference Whitelist Array of dictionaries Optional. Supervised only (ignored otherwise). If present, only AirPlay destinations present in this list are available