MDM restrictions for Mac computers
You can set restrictions, including modifying a device and its features, for Mac computers enrolled in a mobile device management (MDM) solution.
Users can’t use Handoff with their Apple devices.
Users can’t enable screen sharing.
AirPlay, View Screen by Classroom, and screen sharing
Teachers using Classroom can’t use AirPlay with, view, students’ screens, or share a student’s screen.
Classroom to perform AirPlay and View Screen without prompting
Students in managed classes aren’t prompted when the teacher uses AirPlay or View Screen.
Classroom can focus students on a single app and lock the device without prompting
Teachers can lock an app open or lock the device without first prompting the user.
Automatic joining Classroom classes without prompting
Students can join a class without prompting the teacher.
Require teacher permission to leave Classroom teacher-created classes
Students must request permission before they can leave a teacher-created class.
Users can’t use AutoFill Passwords, and no prompt is shown to pick a saved password from iCloud Keychain or third-party password managers.
Users’ devices won’t advertise themselves to nearby devices for passwords by use of Proximity AutoFill. In iOS, iPadOS, and macOS this feature restricts only Wi-Fi Password requests.
Share passwords over AirDrop
Users can’t share their passwords over AirDrop.
Defer software updates
Siri profanity filter
The profanity filter in Siri can be disabled.
Users can’t change the set passcode.
Safari doesn’t remember what users enter in web forms.
The Game Center app and its icon are removed.
Add Game Center friends
Users can’t find or add friends in Game Center.
Users can’t play multiplayer games in Game Center.
Users can’t use AirDrop.
User unlocks Mac using Apple Watch
Users can’t unlock their Mac with Apple Watch.
Users can’t use Apple Music.
Mail isn’t uploaded to iCloud.
Contacts aren’t uploaded to iCloud.
Calendars aren’t uploaded to iCloud.
Reminders aren’t uploaded to iCloud.
Bookmarks aren’t uploaded to iCloud.
iCloud Keychain can’t be used.
iCloud Documents and Data
Documents and data aren’t added to iCloud.
iCloud Drive can’t be used to store any data.
Use of cameras
Cameras are disabled and the Camera icon is removed from the Home Screen in iOS and iPadOS. Users can’t take photographs or videos.
App Store app adoption
iLife and iWork apps that shipped with macOS can’t be adopted by the App Store.
Require admin password to install or update apps
An administrator password is required in order to update any apps.
Restrict app usage
Allows any apps to be placed in an approved list.
Manage app folder access
You can list folders from which apps can be launched and folders from which apps can’t be launched.
Users can’t modify the wallpaper for the Lock Screen, Home Screen, or, on macOS, the Desktop.