MDM commands for Apple devices
MDM solutions can send commands to manage enrolled Apple devices.
Note: Not all commands are available in all MDM solutions. To learn which MDM commands are available for your devices, consult your MDM vendor’s documentation.
MDM command | Minimum supported operating system versions |
|---|---|
Accessibility settings | iOS iPadOS |
Allow Activation Lock | iOS (Supervised) iPadOS (Supervised) macOS (Supervised Mac computers with Apple silicon and the Apple T2 Security Chip) tvOS (Supervised) |
Apply a redemption code | iOS iPadOS |
Change local MDM-created administrator password | macOS |
Clear Activation Lock | iOS (Supervised) iPadOS (Supervised) macOS (Supervised Mac computers with Apple silicon and the Apple T2 Security Chip) |
Clear passcode | iOS iPadOS visionOS 1.1 Note: When the passcode is cleared, it isn’t added to the passcode history and therefore it can be used again. |
Clear the Bypass Code for Activation Lock | iOS (Supervised) iPadOS (Supervised) macOS (Supervised Mac computers with Apple silicon and the Apple T2 Security Chip) visionOS 2.0 |
Clear the Screen Time/Restrictions passcode | iOS iPadOS |
Configure settings | For more information, see MDM settings command options list. |
Create and configure a local administrator account | macOS |
Delete user | macOS (Supervised Mac computers with Apple silicon and the Apple T2 Security Chip) Shared iPad |
Disable Lost Mode | iOS (Supervised) iPadOS (Supervised) |
Disable Remote Desktop | macOS |
Enable Lost Mode | iOS (Supervised) iPadOS (Supervised) |
Enable Remote Desktop | macOS |
Erase a device | iOS iPadOS macOS tvOS visionOS 1.1 Note: The Return to Service option requires iOS 17 and iPadOS 17. For more information, see Return to Service for iPhone and iPad. |
Get eSIM from carrier | iOS iPadOS For more information, see the Apple Developer website RefreshCellularPlansCommand. |
Install a book | iOS iPadOS |
Install a profile | iOS iPadOS Shared iPad macOS tvOS visionOS 1.1 |
Install a provisioning profile | iOS iPadOS Shared iPad macOS tvOS visionOS 1.1 |
Install an app | iOS iPadOS Shared iPad macOS tvOS visionOS 1.1 Note: Mac apps purchased from Apple School Manager or Apple Business Manager can be installed regardless of whether a user is signed in. |
Install an operating system update | iOS (Supervised) iPadOS (Supervised) macOS (Supervised) tvOS (Supervised) |
Install proprietary in-house app | macOS |
List available operating system updates | iOS (Supervised) iPadOS (Supervised) macOS tvOS (Supervised) |
List user accounts | macOS Shared iPad |
Lock device | iOS iPadOS macOS |
Log out user | Shared iPad |
Managed Apple Account default domains | iPadOS 16.1 Shared iPad |
Online authentication grace period | iPadOS 16.1 Shared iPad |
Play Lost Mode sound | iOS (Supervised) iPadOS (Supervised) |
Release a device awaiting configuration | iOS iPadOS macOS Shared iPad tvOS |
Remove a profile | iOS iPadOS Shared iPad macOS tvOS visionOS 1.1 |
Remove a provisioning profile | iOS iPadOS Shared iPad macOS tvOS visionOS 1.1 |
Remove books | iOS iPadOS |
Remove Managed Apps | iOS iPadOS macOS tvOS visionOS 1.1 |
Request AirPlay mirroring | iOS iPadOS macOS |
Restart device | iOS (Supervised) iPadOS (Supervised) macOS tvOS (Supervised) visionOS 2.0 |
Rotate the FileVault key | macOS |
Schedule operating system update scan | iOS iPadOS macOS (Supervised Mac computers with Apple silicon and the Apple T2 Security Chip) tvOS |
Set Firmware password | macOS |
Set organization info: long name, short name, physical address, phone number, email address, and unique identifier | iOS iPadOS macOS tvOS visionOS 1.1 |
Set Recovery Lock | macOS |
Shut down device | iOS (Supervised) iPadOS (Supervised) macOS Shared iPad visionOS 2.0 |
Stop AirPlay mirroring | iOS iPadOS |
Unlock a user account | macOS |