Configure Restriction Profile (iOS/iPadOS)


SureMDM offers restriction of selective settings, functions and media content on the enrolled devices. 

To enforce Restriction Profile on the enrolled devices, follow these steps:

1.  Navigate to SureMDM Web Console > Profiles > iOS/iPadOS > Add > Restriction Profile > Configure.

2.  Enter a Profile Name and configure the Restriction settings.

Restriction section lists following three categories:

  • Device Functionality Restrictions
  • Application-level Restrictions
  • Media Content Restrictions

3.  Toggle OFF to block the following options from different categories and click Save.

Settings

Supported iOS Platform

Require Supervised Mode Activation

Device Functionality Restrictions



Use of Camera

(iOS 4 onwards)

(iOS 13 onwards)

Face Time

(iOS 4 onwards)

(iOS 13 onwards)

Screenshots and screen recording

(iOS 12 onwards)


Allow remote screen observation by the Classroom app


(iOS 12 onwards)

AirDrop


(iOS 7 onwards)

iMessage


(iOS 5 onwards)

Voice dialing while device is locked

(iOS 7 onwards)


Installing apps using Apple Configurator and iTunes

(iOS 9 onwards)

(iOS 10 onwards)

Installing apps using App Store

(iOS 4 onwards)

(iOS 13 onwards)

Automatic app downloads


(iOS 9 onwards)

Removing apps


(iOS 4.2.1 onwards)

In-app purchase

(iOS 7 onwards)


Siri

(iOS 5 onwards)


Siri while device is locked

(iOS 5.1 onwards)


Enable Siri profanity Filter


(iOS 11 onwards)

Show user-generated content in Siri


(iOS 7 onwards)

Require iTunes store password for all purchases

(iOS 6 onwards)


iCloud backup

(iOS 5 onwards)

(iOS 13 onwards)

iCloud documents data

(iOS 5 onwards)

(iOS 13 onwards)

iCloud Keychain

(iOS 7 onwards)


Managed apps to store data in iCloud

(iOS 8 onwards)


iCloud Photo Sharing

(iOS 9 onwards)


iBooks Store


(iOS 6 onwards)

Backup of enterprise books

(iOS 8 onwards)


Notes and highlights sync for enterprise books

(iOS 8 onwards)


My Photo Stream (disallowing can cause data loss)

(iOS 5 onwards)


Automatic sync while roaming

(iOS 4 onwards)


Force encrypted backups

(iOS 4 onwards)


Force limited ad tracking

(iOS 7 onwards)


Erase All Content and Settings


(iOS 8 onwards)

Users to accept untrusted TLS certificates

(iOS 5 onwards)


Trusting new enterprise app authors

(iOS 9 onwards)


Installing Configuration profiles


(iOS 6 onwards)

Force Enable Automatic Date and Time


(iOS 12 onwards)

Time Zone


(iOS 14 onwards)

Modifying account settings


(iOS 7 onwards)

Modifying passcodes


(iOS 9 onwards)

Modifying restrictions


(iOS 8 onwards)

Modifying wallpaper


(iOS 9 onwards)

Pairing with non-configurator hosts


(iOS 7 onwards)

Documents from managed sources in unmanaged destinations

(iOS 12 onwards)


Documents from unmanaged sources in managed destinations

(iOS 7 onwards)


Enable copy-paste restrictions to mirror managed open-in restrictions

(iOS 15 onwards)


Treat AirDrop as unmanaged destination

(iOS 9 onwards)


Spotlight Suggestions


(iOS 8 onwards)

Sending diagnostic and usage data to Apple

(iOS 6 onwards)


Touch ID to unlock device

(iOS 7 onwards)


Force Apple Watch wrist detection

(iOS 8.2 onwards)


Allow pairing with Apple Watch


(iOS 9 onwards)

Predictive Keyboard


(iOS 8.1.3 onwards)

Keyboard shortcuts


(iOS 9 onwards)

Allow continuous path keyboard


(iOS 13 onwards)

Auto correction


(iOS 8.1.3 onwards)

Spell check


(iOS 8.1.3 onwards)

Allow Definition Lookup


(iOS 8.1.3 onwards)

Control Center in Lock Screen

(iOS 7 onwards)


Notification Center in lock screen

(iOS 7 onwards)


Show Today View in lock screen

(iOS 7 onwards)


Changes to cellular data usage for apps


(iOS 7 onwards)

Allow Find My Device


(iOS 13 onwards)

Allow Find my Friends


(iOS 13 onwards)

Changes to Find my Friends


(iOS 7 onwards)

Over-the-air (OTA) PKI updates

(iOS 7 onwards)


Passbook notifications to be shown on the lock screen

(iOS 6 onwards)


Shared Photo Stream

(iOS 6 onwards)


Allow files USB drive access

(iOS 13 onwards)


Allow connecting to network drives

(iOS 13 onwards)


All devices receiving AirPlay requests from your device to use a pairing password

(iOS 7.1 onwards)


All devices sending AirPlay requests to your device to use a pairing password

(iOS 10.2 onwards)


Music Service


(iOS 12.2 onwards)

Modification of device name


(iOS 9 onwards)

iTunes Radio


(iOS 9.3 onwards)

Modification of notification settings


(iOS 9.3 onwards)

Allow modification of Bluetooth settings

iOS 10 onwards

(iOS 11 onwards)

Dictation

iOS 10 onwards

(iOS 10.3 onwards)

Force WiFi Power on

(iOS 13 onwards)


Force WiFi Whitelisting


(iOS 10.3 onwards)

Force Delayed Software Updates


(iOS 10.3 onwards)

Allow Shared iPad Temporary Session


(iOS 13.4 onwards)

Note: Require Apple Business Manager account and managed Apple ID for this setting to work.

Allow modifications of the personal hotspot setting


(iOS 12.2 onwards)

Allow password auto fill 


(iOS 12 onwards)

Allow requesting passwords from nearby devices


(iOS 12 onwards)

Allow password sharing


(iOS 12 onwards)

Allow the prompt to set up new devices that are nearby 


(iOS 11 onwards)

Allow system app removal


(iOS 11 onwards)

Restrict the connection with USB accessories


(iOS 11.4.1 onwards)

Allow the creation of VPN configurations 


(iOS 11 onwards)

Force authentication before autofill the passwords or credit card information 


(iOS 11 onwards)

Requires trusted certificates for TLS printing communication 


(iOS 11 onwards)

Application-level Restrictions



Use of iTunes Store

(iOS 4 onwards)

(iOS 13 onwards)

Use of News


(iOS 9 onwards)

Use of Podcasts


(iOS 8 onwards)

Use of Game Center


(iOS 6 onwards)

Multiplayer gaming


(iOS 4.1 onwards)

Allow adding Game Center friends

(iOS 4.2.1 onwards)

(iOS 13 onwards)

Use of Safari

(iOS 4 onwards)

(iOS 13 onwards)

Enable Autofill

(iOS 4 onwards)

(iOS 13 onwards)

Force fraud warning

(iOS 4 onwards)


Enable JavaScript

(iOS 4 onwards)


Pop-ups

(iOS 4 onwards)


Accept Cookies - Select an option from the following:

  • Always
  • From Current website only
  • From websites I visit



Force classroom automatically join classes


(iOS 10.14.4 onwards)

Force classroom request permission to leave classes 


(iOS 11.3 onwards)

Allow the teacher to lock apps or the device without prompting the student


(iOS 10.14.4 onwards)

Allow the teacher to observe the student(s) screen without prompting the student


(iOS 11 onwards)

Allow SureMDM Agent Removable

(iOS 14 onwards)

(Allow or restrict the user from uninstalling SureMDM Agent)


Media Content Restrictions



Playback of explicit music, podcasts iTunes U Media

(iOS 4 onwards)

(iOS 13 onwards)

Explicit sexual content in iBooks Store


(iOS 6 onwards)


     The newly created profile will be listed in the Profiles section.

4.  Go back to Home tab and select the iOS device(s) or group(s).

5.  Click Apply to launch Apply Job/Profile To Device prompt.

6.  In the Apply Job/Profile To Device prompt, select the created profile and click Apply.