Configure Device Restriction Profile
Restriction Profile allows administrators to limit specific settings, functions, and media content on the enrolled devices. This feature empowers administrators to finely control device capabilities, ensuring that devices are used in ways that align with organizational policies and security standards.
note
- Supported OS Version: iOS 4.0 and iPadOS 4.0 or later
- Supported Enrollment Types:
- Device Enrollment and Automated Device Enrollment
- User Enrollment
- Shared iPad Enrollment
To enforce Device Restrictions on the enrolled devices, follow these steps:
Navigate to SureMDM Web Console > Profiles > iOS/iPadOS > Add > Select Enrollment Type > Device Configuration & Management > Device Restrictions > Configure.
Enter a Profile Name and configure the Restriction settings.
The restriction section lists the following three categories:
- Device Functionality Restrictions
- Application-level Restrictions
- Media Content Restrictions
- Toggle OFF to block the following options from different categories and click Save.
| Settings | Supported iOS Platform | Require Supervised Mode Activation |
|---|---|---|
| Device Functionality Restrictions | ||
| Use of Camera | ✔ (iOS 4 onwards) | ✔ (iOS 13 onwards) |
| Face Time | ✔ (iOS 4 onwards) | ✔ (iOS 13 onwards) |
| Allow Camera on Specified Apps | ✔ (iOS 26 onwards) | |
| Screenshots and screen recording | ✔ (iOS 12 onwards) | |
| Allow remote screen observation by the Classroom app | ✔ | |
| AirDrop | ✔ (iOS 7 onwards) | |
| iMessage | ✔ (iOS 5 onwards) | |
| Allow RCS Messaging | ✔ (iOS 18.1 onwards) | |
| Voice dialing while device is locked | ✔ (iOS 7 onwards) | |
| Allow Live Voicemail | ✔ (iOS 17.2 onwards) | |
| Allow Call Recording | ||
| Allow AirPrint | ✔ (iOS 11 onwards) | |
| Allow AirPrint Credentials Storage | ✔ (iOS 11 onwards) | |
| Allow AirPrint Beacon Discovery | ✔ (iOS 11 onwards) | |
| Block iMessage and FaceTime on Selected Cellular Plans | ✔ (iOS 26 onwards) | |
| Block RCS Messaging on Selected Cellular Plans | ✔ (iOS 26 onwards) | |
| Installing apps using Apple Configurator and iTunes | ✔ (iOS 9 onwards) | ✔ (iOS 10 onwards) |
| Installing apps using App Store | ✔ (iOS 4 onwards) | ✔ (iOS 13 onwards) |
| Allow apps installation from alternative marketplaces | ✔ (iOS 17.4 onwards) | |
| Allow apps installation from a website | ✔ (iOS 17.5 onwards) | |
| Automatic app downloads | ✔ (iOS 9 onwards) | |
| Removing apps | ✔ (iOS 4.2.1 onwards) | |
| In-app purchase | ✔ (iOS 7 onwards) | |
| Siri | ✔ (iOS 5 onwards) | |
| Siri while device is locked | ✔ (iOS 5.1 onwards) | |
| Enable Siri profanity Filter | ✔ (iOS 11 onwards) | |
| Show user-generated content in Siri | ✔ (iOS 7 onwards) | |
| Require iTunes store password for all purchases | ✔ (iOS 6 onwards) | |
| iCloud backup | ✔ (iOS 5 onwards) | ✔ (iOS 13 onwards) |
| iCloud documents data | ✔ (iOS 5 onwards) | ✔ (iOS 13 onwards) |
| iCloud Keychain | ✔ (iOS 7 onwards) | |
| Managed apps to store data in iCloud | ✔ (iOS 8 onwards) | |
| iCloud Photo Sharing | ✔ (iOS 9 onwards) | |
| Allow iCloud Private Relay | ✔ (iOS 9 onwards) | |
| iBooks Store | ✔ (iOS/ipadOS 15 onwards) | |
| Backup of enterprise books | ✔ (iOS 8 onwards) | |
| Notes and highlights sync for enterprise books | ✔ (iOS 8 onwards) | |
| My Photo Stream (disallowing can cause data loss) | ✔ (iOS 5 onwards) | |
| Automatic sync while roaming | ✔ (iOS 4 onwards) | |
| Force encrypted backups | ✔ (iOS 4 onwards) | |
| Force limited ad tracking | ✔ (iOS 7 onwards) | |
| Erase All Content and Settings | ✔ (iOS 8 onwards) | |
| Users to accept untrusted TLS certificates | ✔ (iOS 5 onwards) | |
| Trusting new enterprise app authors | ✔ (iOS 9 onwards) | |
| Installing Configuration profiles | ✔ (iOS 6 onwards) | |
| Force Enable Automatic Date and Time | ✔ (iOS 12 onwards) | |
| Time Zone | ✔ (iOS 14 onwards) | |
| Modifying account settings | ✔ (iOS 7 onwards) | |
| Modifying passcodes | ✔ (iOS 9 onwards) | |
| Modifying restrictions | ✔ (iOS 8 onwards) | |
| Modifying wallpaper | ✔ (iOS 9 onwards) | |
| Pairing with non-configurator hosts | ✔ (iOS 7 onwards) | |
| Allow documents from managed sources in unmanaged destinations | ✔ (iOS 12 onwards) | |
| Allow documents from unmanaged sources in managed destinations | ✔ (iOS 7 onwards) | |
| Enable copy-paste restrictions to mirror managed open-in restrictions | ✔ (iOS 15 onwards) | |
| Protect Mail Activity | ✔ (iOS 15 onwards) | |
| Treat AirDrop as unmanaged destination | ✔ (iOS 9 onwards) | |
| Spotlight Suggestions | ✔ (iOS 8 onwards) | |
| Sending diagnostic and usage data to Apple | ✔ (iOS 6 onwards) | |
| Touch ID to unlock device | ✔ (iOS 7 onwards) | |
| Force Apple Watch wrist detection | ✔ (iOS 8.2 onwards) | |
| Allow pairing with Apple Watch | ✔ (iOS 9 onwards) | |
| Allow unlocking iPhone using Apple Watch | ✔ (iOS 14.5 onwards) | |
| Predictive Keyboard | ✔ (iOS 8.1.3 onwards) | |
| Keyboard shortcuts | ✔ (iOS 9 onwards) | |
| Allow continuous path keyboard | ✔ (iOS 13 onwards) | |
| Auto correction | ✔ (iOS 8.1.3 onwards) | |
| Spell check | ✔ (iOS 8.1.3 onwards) | |
| Allow Definition Lookup | ✔ (iOS 8.1.3 onwards) | |
| Control Center in Lock Screen | ✔ (iOS 7 onwards) | |
| Notification Center in lock screen | ✔ (iOS 7 onwards) | |
| Show Today View in lock screen | ✔ (iOS 7 onwards) | |
| Allow iPhone or iPad Widgets on a Mac | ✔ (iOS/ipadOS 17 onwards) | |
| Changes to cellular data usage for apps | ✔ (iOS 7 onwards) | |
| Allow Find My Device | ✔ (iOS 13 onwards) | |
| Allow Find my Friends | ✔ (iOS 13 onwards) | |
| Changes to Find my Friends | ✔ (iOS 7 onwards) | |
| Over-the-air (OTA) PKI updates | ✔ (iOS 7 onwards) | |
| Passbook notifications to be shown on the lock screen | ✔ (iOS 6 onwards) | |
| Shared Photo Stream | ✔ (iOS 6 onwards) | |
| Allow files USB drive access | ✔ (iOS 13 onwards) | |
| Allow connecting to network drives | ✔ (iOS 13 onwards) | |
| All devices receiving AirPlay requests from your device to use a pairing password | !✔ (iOS 7.1 onwards) | |
| All devices sending AirPlay requests to your device to use a pairing password | ✔ (iOS 10.2 onwards) | |
| Allow Video Conferencing Remote Control | ✔ (iOS 18 onwards) | |
| Allow Satellite Connection | ✔ (iOS 15.4 onwards) | |
| Allow Unpaired External Boot to Recovery | ✔ (iOS 14.5 onwards) | |
| Music Service | ✔ (iOS 12.2 onwards) | |
| Modification of device name | ✔ (iOS 9 onwards) | |
| iTunes Radio | ✔ (iOS 9.3 onwards) | |
| Modification of notification settings | ✔ (iOS 9.3 onwards) | |
| Allow modification of Bluetooth settings | iOS 10 onwards | ✔ (iOS 11 onwards) |
| Dictation | iOS 10 onwards | ✔ (iOS 10.3 onwards) |
| Allow Process dictation on device | ✔ (iOS/ipadOS 14.5 onwards) | |
| Allow Process translation on device | ✔ (iOS/ipadOS 15 onwards) | |
| Force WiFi Power on | ✔ (iOS 13 onwards) | |
| Force WiFi Whitelisting | ✔ (iOS 10.3 onwards) | |
| Force Delayed Software Updates | ✔ (iOS 10.3 onwards) | |
| Allow Shared iPad Temporary Session | ✔ (iOS 13.4 onwards) ✔ Note: Require Apple Business Manager account and managed Apple ID for this setting to work. | |
| Handoff | ✔ (iOS 8 and ipadOS 13.1 onwards) Note: Users cannot use handoff with their Apple devices. | |
| Allow near-field communications (NFC) | ✔ (iOS 14.2 onwards) | |
| Allow personalised ads delivered by Apple | ✔ (iOS 14.0 and ipadOS 14.0 onwards) | |
| Allow modifications of the personal hotspot setting | ✔ (iOS 12.2 onwards) | |
| Allow password auto fill | ✔ (iOS 12 onwards) | |
| Allow requesting passwords from nearby devices | ✔ (iOS 12 onwards) | |
| Allow password sharing | ✔ (iOS 12 onwards) | |
| Allow the prompt to set up new devices that are nearby | ✔ (iOS 11 onwards) | |
| Allow system app removal | ✔ (iOS 11 onwards) | |
| Restrict the connection with USB accessories | ✔ (iOS 11.4.1 onwards) | |
| Allow the creation of VPN configurations | ✔ (iOS 11 onwards) | |
| Force authentication before autofill the passwords or credit card information | ✔ (iOS 11 onwards) | |
| Force AirPrint Trusted TLS Requirement | ✔ (iOS 11 onwards) | |
| Force preservation of eSIM on erase | ✔ (iOS/ipadOS 17.2 onwards) | |
| Allow Modify eSIM settings | ✔ (iOS 12.1 and ipadOS 13.1 onwards) | |
| Allow ESIM Outgoing Transfers | ✔ (iOS 18 onwards) | |
| Requires trusted certificates for TLS printing communication | ✔ (iOS 11 onwards) | |
| Allow auto-dim | ✔ (iOS 17.4 onwards) | |
| Application-level Restrictions | ||
| Use of iTunes Store | ✔ (iOS 4 onwards) | ✔ (iOS 13 onwards) |
| Use of News | !✔ (iOS 9 onwards) | |
| Use of Podcasts | ✔ (iOS 8 onwards) | |
| Use of Game Center | ✔ (iOS 6 onwards) | |
| Multiplayer gaming | ✔ (iOS 4.1 onwards) | |
| Allow adding Game Center friends | ✔ (iOS 4.2.1 onwards) | ✔ (iOS 13 onwards) |
| Allow App Clips | ✔ (iOS/ipadOS 14 onwards) | |
| Allow Apps to be hidden | ✔ (iOS 18 onwards) | |
| Allow Apps to be locked | ✔ (iOS 18 onwards) | |
| Allow Default Browser modification | ✔ (iOS 18.2 onwards) | |
| Allow Default Calling App Modification | ✔ (iOS 18.4 onwards) | |
| Allow Default Messaging App Modification | ✔ (iOS 18.4 onwards) | |
| Use of Safari | ✔ (iOS 4 onwards) | ✔ (iOS 13 onwards) |
| Enable Autofill | ✔ (iOS 4 onwards) | ✔ (iOS 13 onwards) |
| Force fraud warning | ✔ (iOS 4 onwards) | |
| Enable JavaScript | ✔ (iOS 4 onwards) | |
| Pop-ups | ✔ (iOS 4 onwards) | |
| Allow History Cleaning | ✔ (iOS 26 onwards) | |
| Allow Private Browsing | ✔ (iOS 26 onwards) | |
| Accept Cookies - Select an option from the following: Always From Current website only From websites I visit | ||
| Force classroom automatically join classes | ✔ (iOS 10.14.4 onwards) | |
| Force classroom request permission to leave classes | ✔ (iOS 11.3 onwards) | |
| Allow the teacher to lock apps or the device without prompting the student | !✔ (iOS 10.14.4 onwards) | |
| Allow the teacher to observe the student(s) screen without prompting the student | ✔ (iOS 11 onwards) | |
| Allow SureMDM Agent Removable | ✔ (iOS 14 onwards) (Allow or restrict the user from uninstalling SureMDM Agent) | |
| Apple Intelligence | ||
| Allow Genmoji | ✔ (iOS 18 onwards) | |
| Allow Image Playground | ✔ (iOS 18 onwards) | |
| Allow Image Wand | ✔ (iOS 18 onwards) | |
| Allow iPhone Mirroring | ✔ (iOS 18 onwards) | |
| Allow Personalized Handwriting Results | ✔ (iOS 18 onwards) | |
| Allow Writing Tools | ✔ (iOS 18 onwards) | |
| Allow Smart Replies in Mail | ✔ (iOS 18.2 onwards) | |
| Allow Transcription in Notes | ✔ (iOS 18.2 onwards) | |
| Allow Transcription Summarization in Notes | ✔ (iOS 18.3 onwards) | |
| Allow Visual Intelligence Summary | ✔ (iOS 18.3 onwards) | |
| Allow Apple Intelligence Report | ✔ (iOS 18.4 onwards) | |
| Allow Mail Summary | ✔ (iOS 18.1 onwards) | |
| Allow integration with external intelligence services | ✔ (iOS 18.2 onwards) | |
| Allow users to log in to external intelligence services | ✔ (iOS 18.2 onwards) | |
| Allowed External Intelligence Workspace IDs | ✔ (iOS 18.3 onwards) | |
| Allow Summarization in Safari | ✔ (iOS 18.2 onwards) | |
| Media Content Restrictions | ||
| Playback of explicit music, podcasts iTunes U Media | ✔ (iOS 4 onwards) | !✔ (iOS 13 onwards) |
| Explicit sexual content in iBooks Store | ✔ (iOS 6 onwards) |
The newly created profile will be listed in the Profiles section.
Go back to the Home tab and select the iOS/iPadOS device(s) or group(s).
Click Apply to launch the Apply Job/Profile To Device prompt.
Select the profile under All Jobs/Profiles.
Click Apply in the Apply/Profile To Device prompt.