System Settings
The System Settings Profile enables administrators to enforce policies that control the activation or deactivation of specific system settings on enrolled devices. This ensures a uniform application of security and functional configurations across the device fleet, promoting consistent adherence to desired operational standards.
To create a system settings profile, follow these steps:
1. Navigate to the SureMDM Web Console > Profiles > Linux > Add > System Settings > Configure.
2. Enter a Profile Name.
3. Configure desired system restrictions settings from the following options.
| Settings | Description |
|---|---|
| Wi-Fi Settings | Use this option to set Wi-Fi to always On or Off. |
| Disable Clipboard Settings | Use this option to disable the clipboard setting (copy/paste). |
| Disable Bluetooth | Use this option to enable/disable Bluetooth setting. |
| Update Packages | Use this option to synchronize the package index files from their sources. |
| Install Kernel Updates | Use this option to Install kernel updates on a Linux machine. |
| Upgrade Packages | Use this option to install available upgrades of all packages. |
| Force Wi-Fi Whitelisting | Use this option to connect to the networks configured in the Wi-Fi Configuration profile. |
| Enable Lock Screen Message | Use this option to set a customized message on the lock screen of the device. Note: This feature is supported only on the SureMDM Agent version 3.3.1 and later. |
| Disable Screen Capture | Use this option to disable screen capture on the device. Note: Disable Screen Capture' feature is supported from SureMDM Agent Version 3.6.2 onwards. |
4. Configure desired Bluetooth Controls settings from the following options and click Save:
| Settings | Description |
|---|---|
| Enable Bluetooth Service | Toggle this option to enable or disable Bluetooth functionality on the device. |
| Bluetooth Permission | Allow: All Bluetooth devices will be blocked except for specified exceptions. Block: All Bluetooth devices will be allowed except for specified exceptions. |
| Allowed Bluetooth Device Categories (Available when Bluetooth Permission is set to Allow) | Select from the specific categories of Bluetooth devices that will be permitted while others remain blocked. Audio devices (Bluetooth speakers, headphones) HSP - Headsets Hands-free devices (Car kits, Bluetooth headsets) Networking devices (Bluetooth tethering, Internet access via Bluetooth Modem) OBEX/FTP (File transfer devices) Serial devices (GPS devices, serial communication) Messaging devices (SMS messaging over Bluetooth) Imaging devices (Bluetooth-enabled cameras, printers) Audio/Video control devices (Remote Control for Music) Input Devices (Keyboard, Mouse) Low Energy Devices (Fitness Trackers, Smartwatches) PBA-Personal Broadband Profile (High-speed Data Devices) |
| Allowlist Bluetooth Devices (Available when Bluetooth Permission is set to Allow) | Specify the MAC addresses of Bluetooth devices that will be allowed regardless of category restrictions. Multiple device mac addresses can be added. |
| Blocked Bluetooth Device Categories (Available when Bluetooth Permission is set to Block) | Select specific categories of Bluetooth devices that will be blocked while others remain accessible. |
| Blocklist Bluetooth Devices (Available when Bluetooth Permission is set to Block) | Specify the MAC addresses of Bluetooth devices that will be explicitly blocked, even if they fall under allowed categories. |
- If Bluetooth Permission is set to Allow, all Bluetooth devices will be blocked except the ones in the Allowed Bluetooth Device Categories or in the Allowlist Bluetooth Devices.
- If Bluetooth Permission is set to Block, all Bluetooth devices will be allowed except the ones in the Blocked Bluetooth Device Categories or in the Blocklisted Bluetooth devices.
- Bluetooth Controls is supported on Linux devices with SureMDM Agent version 7.12.0 and above.
5. Go back to the Home tab and select the Linux device(s) or group(s).
6. Click Apply to launch the Apply Job/Profile To Device prompt.
7. In the Apply Job/Profile To Device prompt, select the job and click Apply.