Apple Business User Guide
- Welcome
-
-
-
- Intro to Configurations
-
- AirDrop configuration
- AirPlay configuration
- AirPrint configuration
- App Access configuration
- Apple Intelligence & Siri configuration
- Application Layer Firewall configuration
- Certificate configuration
- Content Caching configuration
- Custom configuration
- Data Management configuration
- Energy Saver configuration
- FileVault configuration
- Gatekeeper configuration
- iCloud configuration
- Lock Screen configuration
- Password and Screen Unlock configuration
- Software Update configuration
- VPN configuration
- Web Clip configuration
- Web Filter configuration
- Wi-Fi configuration
- Edit a configuration
- Apply Blueprints
-
- Glossary
- Document revision history
- Copyright and trademarks
Lock a domain in Apple Business
When a domain is locked, only Managed Apple Accounts can be created using the verified domain. Unmanaged (personal) Apple Accounts can’t be created on this domain and existing Apple Accounts created before enabling the lock remain in place, unless Account Transfer is initiated. This option helps to ensure that moving forward, all accounts using the domain are organizationally owned.
Important: Locking a domain permanently prevents anyone from creating an unmanaged (personal) Apple Account using that domain and can’t be turned off unless the domain is removed.
Lock a domain
In Apple Business, sign in with a user whose role has permissions to view, edit, and delete the organization’s domains.
To view roles and permissions, see Intro to roles and permissions.
Select the domain you want to lock, select Manage, then lock the domain.
Read the information carefully. The only way to unlock a domain is to remove it from Apple Business.
Important: Locking a domain permanently prevents anyone from creating an unmanaged (personal) Apple Account using that domain and can’t be turned off unless the domain is removed.
Select Lock Domain.
Choose one of the following:
Close the window if you want to begin the account transfer process or federation process at a later time.
Federate the domain.
Select Get Started with Account Transfer to begin the account transfer process. See Transfer accounts.
If you locked this domain in error, see Remove a domain.