Configure Device Restriction Profile
Restriction Profile allows administrators to limit specific settings, functions, and media content on the enrolled devices. This feature empowers administrators to finely control device capabilities, ensuring that devices are used in ways that align with organizational policies and security standards.
To enforce Device Restrictions on the enrolled devices, follow these steps:
Navigate to SureMDM Web Console > Profiles > iOS/iPadOS > Add > Device Restrictions > Configure.
Enter a Profile Name and configure the Restriction settings.
The restriction section lists the following three categories:
- Device Functionality Restrictions
- Application-level Restrictions
- Media Content Restrictions
- Toggle OFF to block the following options from different categories and click Save.
| Settings | Supported iOS Platform | Require Supervised Mode Activation |
|---|---|---|
| Device Functionality Restrictions | ||
| Use of Camera | ✔ (iOS 4 onwards) | ✔ (iOS 13 onwards) |
| Face Time | ✔ (iOS 4 onwards) | ✔ (iOS 13 onwards) |
| Screenshots and screen recording | ✔ (iOS 12 onwards) | |
| Allow remote screen observation by the Classroom app | ✔ | |
| AirDrop | ✔ (iOS 7 onwards) | |
| iMessage | ✔ (iOS 5 onwards) | |
| Voice dialing while device is locked | ✔ (iOS 7 onwards) | |
| Installing apps using Apple Configurator and iTunes | ✔ (iOS 9 onwards) | ✔ (iOS 10 onwards) |
| Installing apps using App Store | ✔ (iOS 4 onwards) | ✔ (iOS 13 onwards) |
| Automatic app downloads | ✔ (iOS 9 onwards) | |
| Removing apps | ✔ (iOS 4.2.1 onwards) | |
| In-app purchase | ✔ (iOS 7 onwards) | |
| Siri | ✔ (iOS 5 onwards) | |
| Siri while device is locked | ✔ (iOS 5.1 onwards) | |
| Enable Siri profanity Filter | ✔ (iOS 11 onwards) | |
| Show user-generated content in Siri | ✔ (iOS 7 onwards) | |
| Require iTunes store password for all purchases | ✔ (iOS 6 onwards) | |
| iCloud backup | ✔ (iOS 5 onwards) | ✔ (iOS 13 onwards) |
| iCloud documents data | ✔ (iOS 5 onwards) | ✔ (iOS 13 onwards) |
| iCloud Keychain | ✔ (iOS 7 onwards) | |
| Managed apps to store data in iCloud | ✔ (iOS 8 onwards) | |
| iCloud Photo Sharing | ✔ (iOS 9 onwards) | |
| iBooks Store | ✔ (iOS 6 onwards) | |
| Backup of enterprise books | ✔ (iOS 8 onwards) | |
| Notes and highlights sync for enterprise books | ✔ (iOS 8 onwards) | |
| My Photo Stream (disallowing can cause data loss) | ✔ (iOS 5 onwards) | |
| Automatic sync while roaming | ✔ (iOS 4 onwards) | |
| Force encrypted backups | ✔ (iOS 4 onwards) | |
| Force limited ad tracking | ✔ (iOS 7 onwards) | |
| Erase All Content and Settings | ✔ (iOS 8 onwards) | |
| Users to accept untrusted TLS certificates | ✔ (iOS 5 onwards) | |
| Trusting new enterprise app authors | ✔ (iOS 9 onwards) | |
| Installing Configuration profiles | ✔ (iOS 6 onwards) | |
| Force Enable Automatic Date and Time | ✔ (iOS 12 onwards) | |
| Time Zone | ✔ (iOS 14 onwards) | |
| Modifying account settings | ✔ (iOS 7 onwards) | |
| Modifying passcodes | ✔ (iOS 9 onwards) | |
| Modifying restrictions | ✔ (iOS 8 onwards) | |
| Modifying wallpaper | ✔ (iOS 9 onwards) | |
| Pairing with non-configurator hosts | ✔ (iOS 7 onwards) | |
| Documents from managed sources in unmanaged destinations | ✔ (iOS 12 onwards) | |
| Documents from unmanaged sources in managed destinations | ✔ (iOS 7 onwards) | |
| Enable copy-paste restrictions to mirror managed open-in restrictions | ✔ (iOS 15 onwards) | |
| Protect Mail Activity | Protect Mail Activity | ✔ (iOS 15 onwards) |
| Treat AirDrop as unmanaged destination | ✔ (iOS 9 onwards) | |
| Spotlight Suggestions | ✔ (iOS 8 onwards) | |
| Sending diagnostic and usage data to Apple | ✔ (iOS 6 onwards) | |
| Touch ID to unlock device | ✔ (iOS 7 onwards) | |
| Force Apple Watch wrist detection | ✔ (iOS 8.2 onwards) | |
| Allow pairing with Apple Watch | ✔ (iOS 9 onwards) | |
| Predictive Keyboard | ✔ (iOS 8.1.3 onwards) | |
| Keyboard shortcuts | ✔ (iOS 9 onwards) | |
| Allow continuous path keyboard | ✔ (iOS 13 onwards) | |
| Auto correction | ✔ (iOS 8.1.3 onwards) | |
| Spell check | ✔ (iOS 8.1.3 onwards) | |
| Allow Definition Lookup | ✔ (iOS 8.1.3 onwards) | |
| Control Center in Lock Screen | ✔ (iOS 7 onwards) | |
| Notification Center in lock screen | ✔ (iOS 7 onwards) | |
| Show Today View in lock screen | ✔ (iOS 7 onwards) | |
| Changes to cellular data usage for apps | ✔ (iOS 7 onwards) | |
| Allow Find My Device | ✔ (iOS 13 onwards) | |
| Allow Find my Friends | ✔ (iOS 13 onwards) | |
| Changes to Find my Friends | ✔ (iOS 7 onwards) | |
| Shared Photo Stream | ✔ (iOS 6 onwards) | |
| Allow files USB drive access | ✔ (iOS 13 onwards) | |
| Allow connecting to network drives | ✔ (iOS 13 onwards) | |
| All devices receiving AirPlay requests from your device to use a pairing password | !✔ (iOS 7.1 onwards) | |
| All devices sending AirPlay requests to your device to use a pairing password | ✔ (iOS 10.2 onwards) | |
| Music Service | ✔ (iOS 12.2 onwards) | |
| Modification of device name | ✔ (iOS 9 onwards) | |
| iTunes Radio | ✔ (iOS 9.3 onwards) | |
| Modification of notification settings | ✔ (iOS 9.3 onwards) | |
| Allow modification of Bluetooth settings | iOS 10 onwards | ✔ (iOS 11 onwards) |
| Dictation | iOS 10 onwards | ✔ (iOS 10.3 onwards) |
| Force WiFi Power on | ✔ (iOS 13 onwards) | |
| Force WiFi Whitelisting | ✔ (iOS 10.3 onwards) | |
| Force Delayed Software Updates | ✔ (iOS 10.3 onwards) | |
| Allow Shared iPad Temporary Session | ✔ (iOS 13.4 onwards) ✔ Note: Require Apple Business Manager account and managed Apple ID for this setting to work. | |
| Allow modifications of the personal hotspot setting | ✔ (iOS 12.2 onwards) | |
| Allow password auto fill | ✔ (iOS 12 onwards) | |
| Allow requesting passwords from nearby devices | ✔ (iOS 12 onwards) | |
| Allow password sharing | ✔ (iOS 12 onwards) | |
| Allow the prompt to set up new devices that are nearby | ✔ (iOS 11 onwards) | |
| Allow system app removal | ✔ (iOS 11 onwards) | |
| Restrict the connection with USB accessories | ✔ (iOS 11.4.1 onwards) | |
| Allow the creation of VPN configurations | ✔ (iOS 11 onwards) | |
| Force authentication before autofill the passwords or credit card information | ✔ (iOS 11 onwards) | |
| Requires trusted certificates for TLS printing communication | ✔ (iOS 11 onwards) | |
| Application-level Restrictions | ||
| Use of iTunes Store | ✔ (iOS 4 onwards) | ✔ (iOS 13 onwards) |
| Use of News | !✔ (iOS 9 onwards) | |
| Use of Podcasts | ✔ (iOS 8 onwards) | |
| Use of Game Center | ✔ (iOS 6 onwards) | |
| Multiplayer gaming | ✔ (iOS 4.1 onwards) | |
| Allow adding Game Center friends | ✔ (iOS 4.2.1 onwards) | ✔ (iOS 13 onwards) |
| Use of Safari | ✔ (iOS 4 onwards) | ✔ (iOS 13 onwards) |
| Enable Autofill | ✔ (iOS 4 onwards) | ✔ (iOS 13 onwards) |
| Force fraud warning | ✔ (iOS 4 onwards) | |
| Enable JavaScript | ✔ (iOS 4 onwards) | |
| Pop-ups | ✔ (iOS 4 onwards) | |
| Accept Cookies - Select an option from the following: Always From Current website only From websites I visit | ||
| Force classroom automatically join classes | ✔ (iOS 10.14.4 onwards) | |
| Force classroom request permission to leave classes | ✔ (iOS 11.3 onwards) | |
| Allow the teacher to lock apps or the device without prompting the student | !✔ (iOS 10.14.4 onwards) | |
| Allow the teacher to observe the student(s) screen without prompting the student | ✔ (iOS 11 onwards) | |
| Allow SureMDM Agent Removable | ✔ (iOS 14 onwards) (Allow or restrict the user from uninstalling SureMDM Agent) | |
| Media Content Restrictions | ||
| Playback of explicit music, podcasts iTunes U Media | ✔ (iOS 4 onwards) | !✔ (iOS 13 onwards) |
| Explicit sexual content in iBooks Store | ✔ (iOS 6 onwards) |
The newly created profile will be listed in the Profiles section.
Go back to the Home tab and select the iOS/iPadOS device(s) or group(s).
Click Apply to launch the Apply Job/Profile To Device prompt.
Select the profile under All Jobs/Profiles.
Click Apply in the Apply/Profile To Device prompt.