Device Restrictions – DDM
SureMDM provides a dedicated Device Restrictions payload under the DDM section, separate from the existing Legacy Device Restrictions payload. Administrators can configure individual restrictions using Not Configured, Enable, or Disable, depending on the required device policy.
note
- Supported OS Version: iOS/iPadOS 26.4 or later
- Supported Enrollment Type: Device Enrollment and Automated Device Enrollment
Steps to Configure Device Restrictions Using DDM
- On the SureMDM Web Console, navigate to Profiles > iOS/iPadOS > New Profile.
- Select the appropriate enrollment type as Device Enrollment and Automated Device Enrollment
- Expand the DDM section and select Device Restrictions.
- Click Configure to open the Device Restrictions configuration page.
- The configuration page contains the following sections:
- Siri
- Apple Intelligence
- Expand the required section to view the available restrictions.
- Configure the required restrictions using the following options:
- Not Configured: SureMDM does not alter the setting. Apple's default behavior will be followed.
- Enable: Enables the corresponding functionality or applies the specified restriction behavior.
- Disable: Disables the corresponding functionality or applies the specified restriction behavior.
- Repeat the above steps to configure additional restrictions, if required.
- Click Save to save the profile.
Note: Only restrictions supported by the applicable iOS/iPadOS version are displayed.
Configure Siri Restrictions
The Siri section allows administrators to configure restrictions related to Siri functionality on managed iOS/iPadOS devices.
The following restrictions are available:
| Restriction | Description | Minimum Supported OS |
|---|---|---|
| Allow Siri | If disabled, the system restricts users from enabling Siri. | iOS/iPadOS 26.4 or later |
| Allow Siri while device is locked | If disabled, the system restricts users from accessing Siri while the device is locked. | iOS/iPadOS 26.4 or later |
| Enable profanity filter | If enabled, the system forces the Siri profanity filter. | iOS/iPadOS 26.4 or later |
| Allow User Generated Content | If disabled, the system disables user-generated content on Siri. | iOS/iPadOS 26.4 or later |
| Force Reduce Sensitive Content | If enabled, the system forces Siri to reduce sensitive content. | iOS/iPadOS 27 or later |
| Allow AI | If disabled, the system disables the AI-specific features of Siri. | iOS/iPadOS 27 or later |
Configure Apple Intelligence Restrictions
The Apple Intelligence section allows administrators to control the availability of Apple Intelligence features on managed iOS/iPadOS devices.
The following restrictions are available:
| Restriction | Description | Minimum Supported OS |
|---|---|---|
| Allow Apple Intelligence Report | If disabled, the system disables Apple Intelligence reports. | iOS/iPadOS 26.4 or later |
| Allow Genmoji | If disabled, the system disables Genmoji. | iOS/iPadOS 26.4 or later |
| Allow Image Playground | If disabled, users are prohibited from using image generation. | iOS/iPadOS 26.4 or later |
| Allow Image Wand | If disabled, users are prohibited from using Image Wand. | iOS/iPadOS 26.4 or later |
| Allow Personalized Handwriting Results | If disabled, the system prevents the generation of text in the user's handwriting. | iOS/iPadOS 26.4 or later |
| Allow Visual Intelligence | If disabled, the system disables Visual Intelligence. | iOS/iPadOS 27 or later |
| Allow Writing Tools | If disabled, users are restricted from using Apple Intelligence Writing Tools. | iOS/iPadOS 26.4 or later |
| Force On-Device Only Dictation | If enabled, the system forces On-Device Only Dictation. | iOS/iPadOS 26.4 or later |
| Force On-Device Only Translation | If enabled, the system forces On-Device Only Translation. | iOS/iPadOS 26.4 or later |
| Allow Natural Language Editing in Calendar App | If disabled, the system disables Natural Language Editing in Calendar and Reminders. | iOS/iPadOS 27 or later |
| Allow Smart Replies in Mail | If disabled, users are restricted from using Smart Replies in Mail. | iOS/iPadOS 26.4 or later |
| Allow Mail Summary | If disabled, mail summarization is restricted on the device. | iOS/iPadOS 26.4 or later |
| Allow Transcription in Notes | If disabled, users are restricted from using transcription in the Notes app. | iOS/iPadOS 26.4 or later |
| Allow Transcription Summarization in Notes | If disabled, users are restricted from generating summaries of transcriptions in the Notes app. | iOS/iPadOS 26.4 or later |
| Allow Summarization in Safari | If disabled, users are restricted from generating summaries of content in Safari. | iOS/iPadOS 26.4 or later |
Additional Configuration Options
Expand All and Collapse All
- Expand All: Expands all available sections, including Siri and Apple Intelligence.
- Collapse All: Collapses all available sections.
These options do not modify the configured restriction values.
Search Restrictions
The Search field allows administrators to locate restrictions using the restriction name or section name.
- Enter a restriction name to display the matching restriction under its corresponding section.
- Enter a section name, such as Siri or Apple Intelligence, to display the corresponding section and its applicable restrictions.
Deploy the Device Restrictions Profile
- After configuring the required restrictions, click Save to save the iOS/iPadOS profile.
- Navigate to the Home tab.
- Select the required iOS/iPadOS device(s) or group(s).
- Click Apply to open the Apply Job/Profile To Device prompt.
- Select the created profile and click Apply to deploy it to the selected devices.