Device MDM restrictions for Apple devices
You can restrict certain features on iPhone, iPad, Mac, and Apple TV devices enrolled in a mobile device management (MDM) solution or with Apple Configurator 2 (iPhone, iPad, and Apple TV only). See the Apple Configurator 2 User Guide.
Setting | Functionality restriction | Supervised | Introduced |
|---|---|---|---|
Allow App Clips | Users can’t add App Clips. Any existing App Clips are removed when this restriction is applied. | No | iOS 14.0 iPadOS 14 |
Allow Shared iPad Temporary Session | Shared iPad won’t allow a Temporary Session. | Yes | iPadOS 13.4 |
Allow network drive connections | Users can’t connect to network drives in the Files app. | Yes | iOS 13.0 iPadOS 13.1 |
Allow USB device connections | Users can’t connect USB devices to the device. | Yes | iOS 13.0 iPadOS 13.1 |
Force Wi-Fi on | Users can’t turn off Wi-Fi in:
Users can still select which Wi-Fi network to use. | Yes | iOS 13.0 iPadOS 13.1 |
Allow QuickPath keyboard | Users can’t use the QuickPath keyboard. | Yes | iOS 13.0 iPadOS 13.1 |
Modify personal Hotspot settings | Users can’t modify personal Hotspot settings. | Yes | iOS 12.2 |
Modify eSIM settings | Users can’t add or remove an eSIM plan for an iPhone that supports eSIM. | Yes | iOS 12.1 |
Turn on “Set Automatically” in Date and Time settings | Set Automatically is turned on, and users can’t turn it off. | Yes | iOS 12.0 tvOS 12.2 |
Allow connected accessories while locked | Users can always connect accessories when the iOS or iPadOS device is locked. See Activating data connections securely in Apple Platform Security. | Yes | 11.4.1 |
Setup a nearby Apple device | Users can’t use their Apple devices to set up and configure other Apple devices. | No | iOS 11.0 |
Modify Bluetooth settings | Users can’t modify the Bluetooth setting. | Yes | iOS 11.0 |
Modify cellular plan settings | Users can’t change any settings for the cellular plan. | Yes | iOS 11.0 |
Dictation | Users can’t use dictation on their device. | Yes (iOS) Yes (iPadOS) No (macOS) | iOS 10.3 macOS 10.13 |
Modify Notifications settings | Users can’t change the configuration of any Notifications settings. | Yes | iOS 9.3 |
Modify device name | Users can’t change the name of the device as shown in Settings > General > About. | Yes | iOS 9.0 tvOS 11.0 |
Pair with Apple Watch | Users can’t pair their supervised iPhone with Apple Watch. | Yes | iOS 9.0 |
Keyboard shortcuts | Users can’t use any keyboard shortcuts. | Yes | iOS 9.0 |
Modify Wallpaper | Users can’t modify the wallpaper for the Lock Screen, Home Screen, or, on macOS, the Desktop. | Yes (iOS) Yes (iPadOS) No (macOS) | iOS 9.0 macOS 10.13 |
iTunes File Sharing | Files can’t be transferred using the Finder (in macOS 10.15 or later), and iTunes (in macOS 10.14 or earlier). | No | macOS 10.13 |
Require password after a predetermined time after sleep or screen saver begins | Users can’t change the time a Mac locks after sleep or the screen saver begins. The options are immediately, 5 seconds, 1, 5, or 15 minutes, or 1, 4, or 8 hours. | No | macOS 10.13 |
User unlocks Mac using Apple Watch | Users can’t unlock their Mac with Apple Watch. | No | macOS 10.12 |
Modify Lock Screen message | Users can’t change the screen message when a Mac is locked. | No | macOS 10.11 |
Look Up | Users can’t search for a word’s definition. | No | macOS 10.11 |
Force Apple Watch wrist detection | Apple Watch locks automatically when it’s removed from the user’s wrist. It can be unlocked with its passcode or from the paired iPhone. | No | iOS 8.2 |
Auto correction | Users won’t see any word correction suggestions. | Yes | iOS 8.1.3 |
Spell check | Users won’t see potentially misspelled words underlined in red. | Yes | iOS 8.1.3 |
Predictive keyboard | Users won’t see the predictive keyboard. | Yes | iOS 8.1.3 |
Define | Users can’t double-tap to search for a word’s definition. | Yes | iOS 8.1.3 |
Modify restrictions or Screen Time settings | Users can’t set their own restrictions on their device for iOS 11.4.1 or earlier. Users can’t set their own Screen Time settings on their device for iOS 12 or later. | Yes | iOS 8.0 (Restrictions) iOS 12.0 (Screen Time) |
Spotlight suggestions | Spotlight won’t return any results from an internet search. | No | iOS 8.0 macOS 10.11 |
Handoff | Users can’t use Handoff with their Apple devices. | No | iOS 8.0 macOS 10.15 |
Control Center in Lock Screen | Users can’t swipe up to view Control Center. | No | iOS 7.0 |
Notification Center in Lock Screen | Users can’t view the Notification history when the screen is locked, however they can still view a Notification when it appears. | No | iOS 7.0 |
Today view in Lock Screen | Users can’t swipe down to see Notification Center using Today View in the Lock Screen. | No | iOS 7.0 |
Modify cellular data app settings | Users can’t change any settings for apps that use cellular data. | Yes | iOS 7.0 |
Modify account settings | Users can’t create new accounts or change their user name, password, or other settings associated with their account. | Yes | iOS 7.0 |
Wallet notifications in Lock Screen | Users must unlock the device to use Wallet. | No | iOS 6.0 |
Install configuration profiles | Configuration profiles can’t be manually installed by users. | Yes | iOS 6.0 |
Voice dialing while device is locked | Users can’t use voice commands to dial their phone when it’s locked. | No | iOS 5.0 |
Automatic sync while roaming | Devices that are roaming sync only when an account is accessed by the user. | No | iOS 5.0 |
Pair with non-Apple Configurator 2 hosts | Users can’t pair their iPhone or iPad device with anything but the Mac with Apple Configurator 2 installed, where the device was first supervised. | Yes | iOS 5.0 |
Screenshots and screen recordings | Users can’t save a screenshot or recording of the screen. | No | iOS 5.0 |