Device Restrictions – DDM
SureMDM provides a dedicated Device Restrictions payload under the DDM section, separate from the existing Legacy Device Restrictions payload. Administrators can configure individual restrictions using Not Configured, Enable, or Disable, depending on the required device policy.
note
- Supported OS Version: macOS 26.4 or later
- Supported Enrollment Type: Device Enrollment and Automated Device Enrollment
- Supported Channel Type: Device Channel
Steps to Configure Device Restrictions Using DDM
- On the SureMDM Web Console, navigate to Profiles > macOS > New Profile.
- Select the appropriate enrollment type as Device Enrollment and Automated Device Enrollment
- Expand the DDM section and select Device Restrictions.
- Click Configure to open the Device Restrictions configuration page.
- The configuration page contains the following sections:
- Siri
- Apple Intelligence
- Expand the required section to view the available restrictions.
- Configure the required restrictions using the following options:
- Not Configured: SureMDM does not alter the setting. Apple's default behavior will be followed.
- Enable: Enables the corresponding functionality or applies the specified restriction behavior.
- Disable: Disables the corresponding functionality or applies the specified restriction behavior.
- Repeat the above steps to configure additional restrictions, if required.
- Click Save to save the profile.
Note: Only restrictions supported by the applicable macOS version are displayed.
Configure Siri Restrictions
The Siri section allows administrators to configure restrictions related to Siri functionality on managed macOS devices.
The following restrictions are available:
| Restriction | Description | Minimum Supported OS |
|---|---|---|
| Allow Siri | If disabled, the system restricts users from enabling Siri. | macOS 26.4 or later |
| Enable profanity filter | If enabled, the system forces the Siri profanity filter. | macOS 26.4 or later |
| Force Reduce Sensitive Content | If enabled, the system forces Siri to reduce sensitive content. | macOS 27 or later |
| Allow AI | If disabled, the system disables the AI-specific features of Siri. | macOS 27 or later |
Configure Apple Intelligence Restrictions
The Apple Intelligence section allows administrators to control the availability of Apple Intelligence features on managed macOS devices.
The following restrictions are available:
| Restriction | Description | Minimum Supported OS |
|---|---|---|
| Allow Apple Intelligence Report | If disabled, the system disables Apple Intelligence reports. | macOS 26.4 or later |
| Allow Genmoji | If disabled, the system disables Genmoji. | macOS 26.4 or later |
| Allow Image Playground | If disabled, users are prohibited from using image generation. | macOS 26.4 or later |
| Allow Visual Intelligence | If disabled, the system disables Visual Intelligence. | macOS 27 or later |
| Allow Writing Tools | If disabled, users are restricted from using Apple Intelligence Writing Tools. | macOS 26.4 or later |
| Force On-Device Only Dictation | If enabled, the system forces On-Device Only Dictation. | macOS 26.4 or later |
| Allow Natural Language Editing in Calendar App | If disabled, the system disables Natural Language Editing in Calendar and Reminders. | macOS 27 or later |
| Allow Smart Replies in Mail | If disabled, users are restricted from using Smart Replies in Mail. | macOS 26.4 or later |
| Allow Mail Summary | If disabled, mail summarization is restricted on the device. | macOS 26.4 or later |
| Allow Transcription in Notes | If disabled, users are restricted from using transcription in the Notes app. | macOS 26.4 or later |
| Allow Transcription Summarization in Notes | If disabled, users are restricted from generating summaries of transcriptions in the Notes app. | macOS 26.4 or later |
| Allow Summarization in Safari | If disabled, users are restricted from generating summaries of content in Safari. | macOS 26.4 or later |
Additional Configuration Options
Expand All and Collapse All
- Expand All: Expands all available sections, including Siri and Apple Intelligence.
- Collapse All: Collapses all available sections.
These options do not modify the configured restriction values.
Search Restrictions
The Search field allows administrators to locate restrictions using the restriction name or section name.
- Enter a restriction name to display the matching restriction under its corresponding section.
- Enter a section name, such as Siri or Apple Intelligence, to display the corresponding section and its applicable restrictions.
Deploy the Device Restrictions Profile
- After configuring the required restrictions, click Save to save the macOS profile.
- Navigate to the Home tab.
- Select the required macOS device(s) or group(s).
- Click Apply to open the Apply Job/Profile To Device prompt.
- Select the created profile and click Apply to deploy it to the selected devices.