Configuring iOS MDM device feature restrictions
To ensure compliance with corporate security requirements, configure restrictions on the operation of the iOS MDM device. For information about available restrictions, refer to the context help of the administration plug-in.
To configure iOS MDM device feature restrictions:
- In the console tree, in the Managed devices folder, select the administration group to which the iOS MDM devices belong.
- In the workspace of the group, select the Policies tab.
- Open the policy properties window by double-clicking any column.
Complete the following steps within 15 minutes. Otherwise, you may face an error when saving changes to the policy.
- In the policy Properties window, select the Features Restriction section.
- In the Features restriction settings section, select the Apply settings on device check box.
- Configure iOS MDM device feature restrictions.
Delay software updates, in days (supervised only, iOS 11.3+)
Allows delaying operating system updates on the device.
If the check box is selected, the user can't access updates for the specified period. The default delay is 30 days. You can specify another period in the Specify the number of days from 1 to 90 field.
If the check box is cleared, the user can update the software as soon as updates are available.
The setting is available for mobile devices running iOS version 11 or later and iPadOS version 13.1 or later.
This check box is cleared by default.
Specify the number of days from 1 to 90
Specifies the number of days to delay software updates. The default value is 30 days.
This option is available if the Delay software updates, in days check box is selected.
Usage of the camera on the user's mobile device.
If the check box is selected, the user is allowed to use the device camera.
If the check box is cleared, the user device camera is disabled. The user cannot take photos, record videos, or use the FaceTime app. The camera icon on the device home screen is hidden.
This check box is selected by default.
Allow FaceTime (supervised only)
Usage of the FaceTime app on the user's mobile device. This check box is available if the use of the device camera is allowed. This setting is available if the Allow use of camera check box is selected.
If the check box is selected, the user can make and receive calls using FaceTime.
If the check box is cleared, the FaceTime app is disabled on the user device. The user cannot make or receive video calls.
This check box is selected by default.
Capability to take a screenshot or video from the screen of the iOS MDM device.
If the check box is selected, the user can take and save screenshots and videos from the screen of the mobile device.
If the check box is cleared, the user cannot take and save screenshots and videos from the screen of the mobile device.
This check box is selected by default.
Allow screen observation by Classroom (supervised only)
Capability for an instructor to view students' iPad screens using the Classroom application. For more details about the Classroom application, please visit the Apple Technical Support website.
If the check box is selected, the instructor can view students' iPad screens in the Classroom application.
If the check box is cleared, the instructor cannot view students' iPad screens in the Classroom application.
This check box is selected by default.
Allow modification of Personal Hotspot settings (supervised only, iOS 12.2+)
If the check box is selected, the device user can modify Personal Hotspot settings.
If the check box is cleared, the device user can't modify Personal Hotspot settings.
The setting is available for mobile devices running iOS version 12.2 or later and iPadOS version 13.1 or later.
This check box is selected by default.
Allow access to USB devices in Files app (supervised only, iOS 13.1+)
If the check box is selected, the user can access connected USB devices in the Files app.
If the check box is cleared, access to connected USB devices in the Files app is blocked.
The setting is available for mobile devices running iOS version 13.1 or later and iPadOS version 13.1 or later.
This check box is selected by default.
Enable USB Restricted Mode while device is locked (supervised only, iOS 11.4.1+)
Specifies whether USB Restricted Mode is enabled when the device is locked.
If the check box is selected, when locked, the device connection to USB drives is limited via USB Restricted Mode.
If the check box is cleared, the device is allowed to connect to USB drives when locked.
The setting is available for mobile devices running iOS version 11.4.1 or later and iPadOS version 13.1 or later.
This check box is selected by default.
Force Wi-Fi on (supervised only, iOS 13.0+)
Specifies whether Wi-Fi on the managed device should be always on. The device can connect to any Wi-Fi network.
If the check box is selected, Wi-Fi on the device is always on, even in flight mode. The user can't disable Wi-Fi in the device settings.
If the check box is cleared, the user can disable Wi-Fi in the device settings.
The setting is available for mobile devices running iOS version 13.0 or later and iPadOS version 13.1 or later.
This check box is cleared by default.
Force connection to allowed Wi-Fi networks only (supervised only, iOS 14.5+)
Specifies whether the device can connect to allowed Wi-Fi networks only. This option is available if you add at least one Wi-Fi network to the list of Wi-Fi networks in the Wi-Fi section.
If the check box is selected, the device connects to allowed Wi-Fi networks only. The user can't disable Wi-Fi in the device settings.
If the check box is cleared, the user can connect to any Wi-Fi network.
The setting is available for mobile devices running iOS version 14.5 or later and iPadOS version 13.1 or later.
This check box is cleared by default.
Allow creating VPN configurations (supervised only, iOS 11+)
If the check box is selected, the user can create a VPN configuration on the managed device.
If the check box is cleared, the user can't create a VPN configuration on the managed device.
The setting is available for mobile devices running iOS version 11 or later and iPadOS version 13.1 or later.
This check box is selected by default.
Allow AirDrop (supervised only)
Use of the AirDrop feature for transmitting user data from the iOS MDM device to other Apple devices.
If the check box is selected, the user can use AirDrop to transmit data to other Apple devices.
If the check box is cleared, the user cannot transmit data to other Apple devices using AirDrop.
This check box is selected by default.
Allow modification of eSIM settings (supervised only, iOS 11+)
Selecting or clearing this check box specifies whether the device user can change carrier plan related settings.
The restriction is supported on devices with iOS 11 and later.
The check box is selected by default.
Allow iMessage (supervised only)
Usage of the iMessage service on the user's mobile device.
If the check box is selected, the user can send and receive messages using the iMessage service.
If the check box is cleared, the iMessage is not available on the mobile device. The user cannot send or receive messages via iMessage.
This check box is selected by default.
Allow Apple Music (supervised only)
Listening to music on the user's mobile device using the Apple Music service.
If the check box is selected, the user can listen to music on the mobile device in the Music app.
If the check box is cleared, the Apple Music service is not available to the user.
This check box is selected by default.
Allow Radio in Apple Music (supervised only)
Listening to the radio using the Apple Music service on the user's mobile device.
If the check box is selected, the user can listen to the radio in the Music app on the mobile device.
If the check box is cleared, the user cannot listen to the radio.
This check box is selected by default.
Allow modification of Bluetooth settings (supervised only, iOS 11+)
If the check box is selected, the user can modify Bluetooth settings on the mobile device.
If the check box is cleared, Bluetooth settings cannot be modified on the mobile device.
The setting is available for mobile devices running iOS version 11 or later and iPadOS version 13.1 or later.
This check box is selected by default.
Allow use of NFC (supervised only, iOS 14.2+)
If the check box is selected, the use of NFC is allowed.
If the check box is cleared, the use of NFC is disabled.
The setting is available for mobile devices running iOS version 14.2 or later.
This check box is selected by default.
Allow voice dialing on a locked device
Use of the voice dialing function on a locked mobile device.
If the check box is selected, the user can use voice commands to dial phone numbers on a locked mobile device.
If the check box is cleared, the user cannot use voice commands to dial phone numbers on a locked mobile device.
This check box is selected by default.
Usage of the Siri app on the user's mobile device.
If the check box is selected, the user can use voice commands of the Siri app on the mobile device.
If the check box is cleared, the user cannot use voice commands of the Siri app on the mobile device.
This check box is selected by default.
Allow use of profanity filter (supervised only)
This option enables the filtering of profanity while using the Siri app on the mobile device.
If the check box is selected, profanity is filtered while the user uses the Siri app.
If the check box is cleared, profanity is not filtered while the user uses the Siri app.
This check box is selected by default.
Use of Siri voice commands when the user's mobile device is locked. The user's mobile device has to be password-protected. This setting is available if the Allow use of Siri check box is selected.
If the check box is selected, the user can use Siri voice commands on a locked mobile device.
If the check box is cleared, the user cannot use Siri voice commands on a locked device.
This check box is selected by default.
Show user's content (supervised only)
This option allows adding personal data of the user to Siri so they can be used in Siri voice commands (for example: "remind me to call wife when I get home") on the iOS MDM device. This setting is available if the Allow use of Siri check box is selected.
If the check box is selected, the user can fill out a personal card in Siri settings and use this information in Siri voice commands.
If the check box is cleared, the user is not allowed to add personal data to Siri.
This check box is selected by default.
Allow AirPrint (supervised only, iOS 11+)
Selecting or clearing this check box specifies whether the device user can use AirPrint.
The restriction is supported on devices with iOS 11 and later.
The check box is selected by default.
Allow storage of AirPrint credentials (supervised only, iOS 11+)
Selecting or clearing this check box specifies whether the device user can store a keychain of user name and password for AirPrint.
The restriction is supported on devices with iOS 11 and later.
The check box is selected by default.
Allow iBeacon discovery of AirPrint printers (supervised only, iOS 11+)
Selecting or clearing this check box specifies whether iBeacon discovery of AirPrint printers is enabled. Disabling iBeacon discovery of AirPrint printers prevents spurious AirPrint Bluetooth beacons from getting information about network traffic.
The restriction is supported on devices with iOS 11 and later.
The check box is selected by default.
Force AirPrint to use a trusted TLS certificate (supervised only, iOS 11+)
Selecting or clearing this check box specifies whether a trusted certificate for TLS printing communication is required.
The restriction is supported on devices with iOS 11 and later.
The check box is cleared by default.
Allow iBooks Store (supervised only)
Access to iBooks Store from the iBooks app on the user's mobile device.
If the check box is selected, the user can visit iBooks Store from the iBooks app installed on the device.
If the check box is cleared, the user cannot visit iBooks Store from the iBooks app.
This check box is selected by default.
Allow installation of apps from Apple Configurator and iTunes (supervised only)
The user can independently install apps on an iOS MDM device.
If the check box is selected, the user can independently install or update apps on a mobile device from App Store using iTunes, Apple Configurator, or Kaspersky Device Management for iOS.
If the check box is cleared, the user cannot install or update apps from App Store using iTunes, Apple Configurator, or Kaspersky Device Management for iOS on a mobile device. Installation and upgrade are available only for corporate apps. The App Store icon is hidden on the home screen of the iOS MDM device.
This check box is selected by default.
Allow installation of apps from App Store (supervised only)
Capability to independently install apps to a mobile device from App Store. The check box is available if the Allow installation of apps from Apple Configurator and iTunes check box is selected.
If the check box is selected, the user can independently install or update apps from App Store.
If the check box is cleared, the user cannot install or update apps from App Store on the mobile device. The App Store icon is hidden on the home screen of the iOS MDM device.
This check box is selected by default.
Allow automatic loading of apps (supervised only)
Use of the function for automatic loading of apps to the user's mobile device. The check box is available if the Allow installation of apps from Apple Configurator and iTunes and Allow installation of apps from App Store check boxes are selected.
If the check box is selected, automatic loading of apps is available to the user (Settings > iTunes and App Store > Applications). After this function is enabled, the apps that the user acquired from App Store are automatically loaded to the user's other Apple devices.
If the check box is cleared, the function for automatic loading of apps is disabled and unavailable.
This check box is selected by default.
Allow removing apps (supervised only)
This option allows removing apps from the mobile device.
If the check box is selected, the user can remove apps installed via App Store or iTunes from the device.
If the check box is cleared, the user cannot remove apps installed via App Store or iTunes from the mobile device.
This check box is selected by default.
Use of the in-App Purchase system on the mobile device.
If the check box is selected, the user can make purchases in apps installed on the mobile device.
If the check box is cleared, the user cannot make purchases in apps installed on the mobile device.
This check box is selected by default.
Prompt for password for each purchase through iTunes Store
Use of the restriction password for purchasing media content in iTunes Store.
If the check box is selected, prior to making the first purchase via iTunes Store the user has to specify the restriction password in purchase restriction settings and subsequently use it for preventing accidental or unauthorized purchases. After the account has been verified when the user is making purchases, the restriction password does not have to be re-entered for another 15 minutes.
If the check box is cleared, the user is not required to enter the restriction password before making purchases in iTunes Store.
This check box is cleared by default.
Automatic data backup from the iOS MDM device to iCloud. Copies of data already stored in iCloud are not created during the backup process. Copies of media content that was received by synchronizing the device with a computer and not purchased from iTunes Store are not created either.
If the check box is selected, the user can save backup copies of mobile device data in iCloud. Backup copies of data are saved in iCloud on a daily basis when the device is enabled, locked, and connected to a power source.
If the check box is cleared, the user cannot save backup copies of mobile device data in iCloud.
This check box is selected by default.
Allow storing documents and data in iCloud (supervised only)
Automatic backup of documents in iCloud. iCloud documents can be opened and edited on other devices on which the iCloud service is configured.
If the check box is selected, the user can save documents in iCloud, open and edit them on other devices in applications that support iCloud (such as TextEdit).
If the check box is cleared, the user is not allowed to save documents in iCloud.
This check box is selected by default.
Automatic synchronization of the account credentials of an iOS MDM device user with other Apple devices of the user. Data to be synchronized is stored in iCloud Keychain. Data in iCloud Keychain is encrypted. iCloud Keychain makes it possible to save the following data in iCloud:
- Website accounts
- Bank card numbers and expiry dates
- Wireless network passwords
If the check box is selected, the user can synchronize data of accounts with other Apple devices of the user.
If the check box is cleared, the user is not allowed to use iCloud Keychain on the mobile device.
This check box is selected by default.
Allow managed apps to store data in iCloud
Creation of a backup copy of the data of managed apps in iCloud. Managed apps are corporate apps that are installed, configured, and managed with the aid of Kaspersky Device Management for iOS.
If the check box is selected, the user can store the data of managed apps in iCloud.
If the check box is cleared, the user cannot store corporate data in iCloud.
This check box is selected by default.
Allow backup of enterprise books
Backup copying of enterprise books using iCloud or iTunes. You can provide access to enterprise books by placing them on the corporate web server.
If the check box is selected, backup copying of enterprise books using iCloud or iTunes is available to the user.
If the check box is cleared, backup copying of enterprise books is not available.
This check box is selected by default.
Allow synchronization of notes and highlights in enterprise books
Capability to synchronize notes, bookmarks, and highlighted text in enterprise books using iCloud.
If the check box is selected, the user can perform synchronization of notes, bookmarks, and highlights in enterprise books (Settings > iBooks > Sync bookmarks and notes). Changes will be available on all the user's Apple devices using iCloud.
If the check box is cleared, notes, bookmarks and highlighted text will be available only on this mobile device.
This check box is selected by default.
Use of iCloud photo sharing on the iOS MDM device to grant other users access to photos and videos on the iCloud server. The other uses need to have the iCloud Photo Sharing feature configured.
If the check box is selected, the iCloud Photo Sharing feature is available to the user. Users of other devices can view the user's photos and videos, leave comments, and add their own photos and videos. The user can also access data of other users on the iCloud server.
If the check box is cleared, the iCloud Photo Sharing feature is not available to the user. The user cannot grant other uses access to the user's photos and videos on the iCloud server or access data of other users on the iCloud server.
This check box is selected by default.
Use of the iCloud Media Library function for automatic uploading of photos and videos from the iOS MDM device to other Apple devices of the user.
If the check box is selected, the iCloud Media Library function is available to the user when working with the Photo app.
If the check box is cleared, the iCloud Media Library function is not available to the user. The user's photos and videos saved in the iCloud Media Library are removed from the iCloud server.
This check box is selected by default.
Allow My Photo Stream (disallowing may result in loss of data)
Use of the Allow My Photo Stream feature for automatic uploading of photos and videos from the iOS MDM device to other Apple devices of the user. The photos and videos are stored in the My Photo Stream folder on the iCloud server for 30 days.
If the check box is selected, the user has access to the My Photo Stream feature when using the iPhoto or Aperture apps.
If the check box is cleared, the user is not allowed access to the My Photo Stream feature. The user's photos and videos saved in the My Photo Stream folder are removed from the iCloud server.
This check box is selected by default.
Allow automatic sync while roaming
Automatic synchronization of user data when the iOS MDM device is roaming.
If the check box is selected, the user can enable automatic data synchronization when the device is roaming. Enabling automatic synchronization in roaming can result in unexpected mobile service costs.
If the check box is cleared, the user is not allowed to use automatic data synchronization when the device is roaming.
This check box is selected by default.
Enable encryption of backup copies
Encryption of backup copies of iOS MDM device data in the iTunes app on the user's computer.
Data of the Kaspersky Device Management for iOS configuration policy is not encrypted regardless of whether or not encryption of the backup copy of data is enabled.
If the check box is selected, when a backup copy of mobile device data is created in the iTunes app, data is encrypted automatically and protected with a password. In this case, the user cannot encrypt backup copies of the device data in the iTunes app.
If the check box is cleared, the user may choose whether or not to use encryption of backup copies of data in the iTunes app.
This check box is cleared by default.
Use of IFA (Identifier for advertisers) technology for keeping track of websites visited and apps launched on the iOS MDM device. IFA makes it possible to configure ad tracking on the mobile device according to the user's interests.
If the check box is selected, IFA technology is disabled on the user's mobile device.
If the check box is cleared, IFA technology is enabled on the mobile device and keeps track of websites visited and apps started in order to show targeted ads.
This check box is cleared by default.
Allow full reset (supervised only)
Capability to wipe all data from the device and reset the device to its factory settings.
If the check box is selected, the user can wipe all data from the device and reset it to factory settings (Settings > General > Reset > Wipe content and settings).
If the check box is cleared, full reset to factory settings is not available.
This check box is selected by default.
Allow users to accept untrusted TLS certificates
Use of untrusted TLS certificates for providing an encrypted communication channel between apps on the iOS MDM device (Mail, Contacts, Calendar, Safari) and corporate resources.
If the check box is selected, the user may allow the use of an untrusted TLS certificate after being shown a warning.
If the check box is cleared, Kaspersky Device Management for iOS automatically blocks the use of untrusted TLS certificates.
This check box is selected by default.
Allow automatic updates of trusted certificates
Automatic update of trusted certificates on the iOS MDM device.
If the check box is selected, Kaspersky Device Management for iOS automatically applies changes made to the trust settings of a certificate.
If the check box is cleared, changes to trust settings of a certificate are not applied automatically. After being shown a warning, the user may choose to apply changes to trust settings of the certificate.
This check box is selected by default.
Allow trusting of new enterprise developers
Capability to configure trusting of corporate apps on a mobile device. You can develop corporate apps and distribute them among employees for internal use. To work with a corporate app, the mobile device user must make it a trusted app. When installing apps via Kaspersky Device Management for iOS, the trust level of apps is automatically set.
If the check box is selected, the user can configure trusting of corporate apps (Settings > General > Profiles or Profiles and device management).
If the check box is cleared, the user cannot set the trust level for corporate apps when installing an app manually. You can install apps only through Kaspersky Device Management for iOS. The trust level of apps will be set automatically.
This check box is selected by default.
Allow installing configuration profiles (supervised only)
Use of additional configuration profiles (other than Kaspersky Security Center policies) on the iOS MDM device.
If the check box is selected, the user can install additional configuration profiles on the mobile device.
If the check box is cleared, the user cannot install additional configuration profiles, other than Kaspersky Security Center policies, on the mobile device.
This check box is selected by default.
Allow editing account settings (supervised only)
The option that lets the user add new accounts (such as email accounts) and edit account settings on the iOS MDM device.
If the check box is selected, the mobile device user can add new accounts and edit the settings of existing accounts.
If the check box is cleared, the mobile device user is not allowed to add new accounts and edit the settings of existing accounts.
This check box is selected by default.
Allow modification of cellular communication settings (supervised only)
Capability to configure cellular network data transfer by apps installed on a mobile device.
If the check box is selected, the user can configure the settings for data transfer over a cellular network (Settings > Cellular communications > Cellular data for apps).
If the check box is cleared, the settings for cellular network data transfer by apps cannot be modified.
This check box is selected by default.
Allow device name editing (supervised only)
Capability to modify the name of the mobile device.
If the check box is selected, the user can edit the mobile device name (Settings > General > About this device > Name).
If the check box is cleared, the device name cannot be edited.
This check box is selected by default.
Allow use of Find My Device in the Find My app (supervised only, iOS 13+)
Selecting or clearing this check box specifies whether the device user can use Find My Device in the Find My app.
The restriction is supported on devices with iOS 13 and later.
The check box is selected by default.
Allow use of Find My Friends in the Find My app (supervised only, iOS 13+)
Selecting or clearing this check box specifies whether the device user can use Find My Friends in the Find My app.
The restriction is supported on devices with iOS 13 and later.
The check box is selected by default.
Allow editing Find My Friends settings (supervised only)
The option that lets the user edit the settings of the Find My Friends app on the iOS MDM device.
If the check box is selected, the user can edit the settings of the Find My Friends app on the iOS MDM device.
If the check box is cleared, the user cannot edit the configured settings of the Find My Friends app on the iOS MDM device.
This check box is selected by default.
Allow editing of notification settings (supervised only)
Capability to configure the display of notifications on the mobile device.
If the check box is selected, the user can configure the settings for displaying notifications on the mobile device (Settings > General > Notifications).
If the check box is cleared, the display of notifications cannot be configured.
This check box is selected by default.
Allow password change (supervised only)
Capability to set, change, or delete the mobile device unlock password.
If the check box is selected, the user can set, change, or delete the password used for unlocking the mobile device (Settings > Password).
If the check box is cleared, management of the device unlock password is not available.
This check box is selected by default.
Allow modification of Touch ID and Face ID (supervised only)
Capability to add and remove Touch ID fingerprints or Face ID data. This setting is available if the Allow password change check box is selected.
You can manage Face ID on devices running iOS version 11.0 or later.
If the check box is selected, the user can add and remove Touch ID fingerprints or Face ID data (Settings > Touch ID & Passcode / Face ID & Passcode > Fingerprints).
If the check box is cleared, Touch ID fingerprint or Face ID data management is not available.
This restriction cannot be applied on iPad devices.
This check box is selected by default.
Allow modification of restrictions (supervised only)
Capability to configure the settings for restrictions on the mobile device. Restrictions may be utilized by the user to perform parental control functions on the mobile device. The user can restrict device functions (for example, block use of the camera), access to media content (for example, set age restrictions on viewing films), use of apps (for example, block the use of iTunes Store), and configure other restrictions.
If the check box is selected, the user can configure the settings for restrictions on the mobile device (Settings > General > Restrictions).
If the check box is cleared, restrictions cannot be configured on the mobile device.
This check box is selected by default.
Allow wallpaper change (supervised only)
Capability to select the image that will be displayed on the lock screen or Home screen.
If the check box is selected, the user can select the wallpaper for the mobile device.
If the check box is cleared, wallpaper selection is not available.
This check box is selected by default.
Allow pairing with non-Configurator hosts (supervised only)
Protection of the iOS MDM device against third-party connections. A third-party connection is a connection to other devices or synchronization with Apple services, such as iTunes.
If the check box is selected, the user can synchronize the iOS MDM device with other devices and Apple services.
If the check box is cleared, Kaspersky Device Management for iOS blocks non-Configurator hosts on the user's mobile device.
This check box is selected by default.
Allow non-managed apps to use documents from managed apps
Possibility to use unmanaged (personal) apps on the iOS MDM device to open documents created using managed (corporate) apps and accounts. Managed apps are corporate apps that are installed, configured, and managed with the aid of Kaspersky Device Management for iOS. Unmanaged apps are apps installed, configured, and managed by the mobile device user.
If the check box is selected, the user can open documents created managed corporate apps in unmanaged apps.
If the check box is cleared, the user is not allowed to open documents created using managed apps in unmanaged apps. For example, this setting prevents the opening of a confidential email attachment from a managed email account in personal apps of the user.
This check box is selected by default.
Allow managed apps to use documents from non-managed apps
Possibility to use managed (corporate) apps on the iOS MDM device to open documents created using unmanaged (personal) apps and accounts of the user. Managed apps are corporate apps that are installed, configured, and managed with the aid of Kaspersky Device Management for iOS. Unmanaged apps are apps installed, configured, and managed by the mobile device user.
If the check box is selected, the user can open documents created using unmanaged apps in managed apps.
If the check box is cleared, the user is not allowed to open documents created using unmanaged apps in managed apps. For example, this setting prevents a document from a personal iCloud account from being opened in a corporate app.
This check box is selected by default.
Treat AirDrop as unmanaged app
Use of AirDrop as an unmanaged app for transferring data from the mobile device to other Apple devices. This restriction requires that you clear the Allow non-managed apps to use documents from managed apps check box. Unmanaged apps are apps installed, configured, and managed by the mobile device user.
If the check box is selected, AirDrop is treated as an unmanaged app.
If the check box is cleared, AirDrop is treated as a managed app.
This check box is selected by default.
Use of the Handoff function on the user's mobile device. Handoff enables you to start working with data on one Apple device and then switch to another Apple device and continue working with that data.
If the check box is selected, Handoff is available to the user.
If the check box is cleared, Handoff is not available.
This check box is selected by default.
Allow Spotlight suggestions (supervised only)
Use of Spotlight suggestions for the Search function on the user's mobile device. Spotlight enables you to show search results from the Internet, iTunes Store, App Store, and other sources when using the Search function. When using Spotlight suggestions, search queries and their associated user data are sent to Apple.
If the check box is selected, the user can allow Spotlight suggestions to be added to the Search function (Settings > General > Spotlight search > Spotlight suggestions).
If the check box is cleared, Spotlight suggestions are not available. User data is not sent to Apple.
This restriction cannot be applied on iPadOS devices.
This check box is selected by default.
Allow diagnostic and personal data to be sent to Apple
Automatic gathering of diagnostic data and information on iOS MDM device usage and transmission of a report with such data to Apple for analysis.
If the check box is selected, after being shown a warning the user may allow transmission of reports with diagnostic data and information on mobile device usage to Apple.
If the check box is cleared, Kaspersky Device Management for iOS blocks transmission of reports with diagnostic data and information on mobile device usage to Apple.
This check box is selected by default.
Allow modification of diagnostic data transmission settings (supervised only)
Automatic gathering of diagnostic data and information on iOS MDM device usage and transmission of a report with such data to Apple for analysis. This setting is available if the Allow diagnostic and personal data to be sent to Apple check box is selected.
If the check box is selected, the user can configure the submission of reports containing diagnostic information and mobile device usage data to Apple (Settings > Confidentiality > Diagnostics and usage).
If the check box is cleared, the settings for submission of reports containing diagnostic information are not available.
This check box is selected by default.
Allow unlocking device through Touch ID or Face ID
Use of Touch ID and Face ID technologies make it possible to use a fingerprint or facial recognition as a password for unlocking the iOS MDM device. Touch ID and Face ID can also be used for authentication of purchases by means of Apple Pay, iTunes Store, App Store, iBooks Store and to sign in into apps.
You can manage Face ID on devices running iOS version 11.0 or later.
If the check box is selected, the user can use a fingerprint or facial recognition instead of a password for unlocking the mobile device.
If the check box is cleared, the user cannot use Touch ID or Face ID technology for unlocking the mobile device.
This check box is selected by default.
Enable Apple Watch wrist detection
Automatic locking of Apple Watch when the user removes the watch from his or her hand.
If the check box is selected, Apple Watch is locked when the user removes a watch from his or her hand (Apple Watch > My watch > General > Wrist detection). To unlock it, the user must enter a password on the mobile device.
If the check box is cleared, Apple Watch cannot be locked after a watch is removed.
This check box is selected by default.
Allow pairing with Apple Watch (supervised only)
Pairing of Apple Watch with a controlled mobile device.
If the check box is selected, the user of the controlled mobile device can create a pairing with Apple Watch.
If the check box is cleared, pairing with Apple Watch is not available.
This check box is selected by default.
Prompt for password on first connection to AirPlay
Use of a password upon connection of the iOS MDM device to devices compatible with AirPlay. The password is used for safe transmission of media content.
If the check box is selected, before the first connection of the mobile device to devices compatible with AirPlay, the user must specify the password in the AirPlay security settings and subsequently enter it.
If the check box is cleared, the user is free to decide whether or not to use a password when connecting the mobile device to devices compatible with AirPlay.
This check box is cleared by default.
Allow predictive keyboard (supervised only)
Use of the predictive text input function. The predictive text input function shows options for completing words and suggestions based on available dictionaries.
If the check box is selected, the user can enable and use the predictive text input function (Settings > General > Keyboard > Predictive text).
If the check box is cleared, the predictive text function is not available. In this case, suggestions are not displayed when entering text.
This check box is selected by default.
Allow keyboard shortcuts (supervised only)
Use of keyboard shortcuts for quick access to mobile device functions.
If the check box is selected, the user can enable the keyboard shortcut function and use it when working with the mobile device (Settings > General > Universal access > Keyboard shortcut).
If the check box is cleared, the keyboard shortcut function is not available.
This check box is selected by default.
Allow auto correction (supervised only)
Use of the auto correction function when entering text.
If the check box is selected, the user can enable and use the auto correction function (Settings > General > Keyboard > Auto correction).
If the check box is cleared, auto correction is not available when entering text.
This check box is selected by default.
Allow spellcheck (supervised only)
Use of spellcheck when entering text on a mobile device. The spellcheck function underlines incorrectly spelled words and suggests corrections.
If the check box is selected, the user can enable and use the spellcheck function (Settings > General > Keyboard > Spellcheck).
If the check box is cleared, spellcheck is not available when entering text.
This check box is selected by default.
Allow dictionary search (supervised only)
Obtaining the definition of a word in a dictionary on the mobile device. Only a software keyboard has a dictionary function.
If the check box is selected, the user can highlight any word on the screen of the mobile device and receive the definition of that word.
If the check box is cleared, dictionary search is not available.
This check box is selected by default.
Allow Wallet on-screen notifications when screen is locked
Use of Wallet notifications on the lock screen of the iOS MDM device.
If the check box is selected, Wallet notifications are displayed on the lock screen of the mobile device.
If the check box is cleared, Wallet notifications are not displayed on the lock screen of the mobile device. To work with Wallet, the user must unlock the device.
This check box is selected by default.
Show Control Center when screen is locked
Possibility to go to the Control Center of the iOS MDM device when the device is locked.
If the check box is selected, the user can go to the Control Center by swiping the lock screen up.
If the check box is cleared, the user cannot go to the Control Center when the device is locked.
This check box is selected by default.
Show Notification Center when screen is locked
Possibility to go to the Notification Center of the iOS MDM device when the device is locked.
If the check box is selected, the user can go to the Notification Center by swiping the lock screen down.
If the check box is cleared, the user cannot go to the Notification Center when the device is locked.
This check box is selected by default.
Show Today when screen is locked
Display of information from the Today section of the Notification Center on the screen of a locked iOS MDM device. The Today section of the Notification Center shows the following information:
- Planned Calendar events
- Reminders
- Stock prices
- Weather
If the check box is selected, the user can view notifications from the Today section of the Notification Center on a locked mobile device.
If the check box is cleared, the Today section is not displayed on the locked mobile device.
This check box is selected by default.
- Click the Apply button to save the changes you have made.
- Select the Restrictions for applications section.
- In the Applications restriction settings section, select the Apply settings on device check box.
- Configure restrictions for apps on the iOS MDM device.
- Click the Apply button to save the changes you have made.
- Select the Restrictions for Media Content section.
- In the Media content restriction settings section, select the Apply settings on device check box.
- Configure restrictions for media content on the iOS MDM device.
- Click the Apply button to save the changes you have made.
As a result, once the policy is applied, restrictions on features, apps, and media content will be configured on the user's mobile device.
