Device management commands for Apple devices
A device management service can send commands to manage enrolled Apple devices.
Note: Not all commands are available in all device management services. To learn which device management commands are available for your devices, consult your developer’s device management service documentation.
Device management command | Minimum supported operating system versions |
|---|---|
Accessibility settings | iOS iPadOS |
Allow Activation Lock | iOS (Supervised) iPadOS (Supervised) macOS (Supervised Mac computers with Apple silicon and the Apple T2 Security Chip) tvOS (Supervised) |
Allow idle reboot | iOS 18.4 iPadOS 18.4 Off by default on supervised devices. |
Apply a redemption code | iOS iPadOS |
Change local device-management-created administrator password | macOS |
Clear Activation Lock | iOS (Supervised) iPadOS (Supervised) macOS (Supervised Mac computers with Apple silicon and the Apple T2 Security Chip) |
Clear passcode | iOS iPadOS visionOS 1.1 Note: When the passcode is cleared, it isn’t added to the passcode history and therefore it can be used again. |
Clear the Bypass Code for Activation Lock | iOS (Supervised) iPadOS (Supervised) macOS (Supervised Mac computers with Apple silicon and the Apple T2 Security Chip) visionOS 2.0 |
Clear the Screen Time/Restrictions passcode | iOS iPadOS |
Configure settings | For more information, see Device management command settings options list. |
Create and configure a local administrator account | macOS |
Delete user | macOS (Supervised Mac computers with Apple silicon and the Apple T2 Security Chip) Shared iPad |
Disable Lost Mode | iOS (Supervised) iPadOS (Supervised) |
Disable Remote Desktop | macOS |
Enable Lost Mode | iOS (Supervised) iPadOS (Supervised) |
Enable Remote Desktop | macOS |
Erase a device | iOS iPadOS macOS tvOS visionOS 1.1 Note: The Return to Service option requires iOS 17 and iPadOS 17. For more information, see Use Return to Service. |
Get eSIM from carrier | iOS iPadOS For more information, see the Apple Developer website RefreshCellularPlansCommand. |
Install a book | iOS iPadOS |
Install a profile | iOS iPadOS Shared iPad macOS tvOS visionOS 1.1 |
Install a provisioning profile | iOS iPadOS Shared iPad macOS tvOS visionOS 1.1 |
Install an app | iOS iPadOS Shared iPad macOS tvOS visionOS 1.1 Note: Mac apps purchased from Apple School Manager or Apple Business Manager can be installed regardless of whether a user is signed in. |
Install an operating system update | iOS (Supervised) iPadOS (Supervised) macOS (Supervised) tvOS (Supervised) |
Install proprietary in-house app | macOS |
List available operating system updates | iOS (Supervised) iPadOS (Supervised) macOS tvOS (Supervised) |
List user accounts | macOS Shared iPad |
Lock device | iOS iPadOS macOS |
Log out user | Shared iPad |
Managed Apple Account default domains | iPadOS 16.1 Shared iPad |
Online authentication grace period | iPadOS 16.1 Shared iPad |
Play Lost Mode sound | iOS (Supervised) iPadOS (Supervised) |
Release a device awaiting configuration | iOS iPadOS macOS Shared iPad tvOS |
Remove a profile | iOS iPadOS Shared iPad macOS tvOS visionOS 1.1 |
Remove a provisioning profile | iOS iPadOS Shared iPad macOS tvOS visionOS 1.1 |
Remove books | iOS iPadOS |
Remove Managed Apps | iOS iPadOS macOS tvOS visionOS 1.1 |
Request AirPlay mirroring | iOS iPadOS macOS |
Restart device | iOS (Supervised) iPadOS (Supervised) macOS tvOS (Supervised) visionOS 2.0 |
Rotate the FileVault key | macOS |
Schedule operating system update scan | iOS iPadOS macOS (Supervised Mac computers with Apple silicon and the Apple T2 Security Chip) tvOS |
Set Firmware password | macOS |
Set organization info: long name, short name, physical address, phone number, email address, and unique identifier | iOS iPadOS macOS tvOS visionOS 1.1 |
Set Recovery Lock | macOS |
Shut down device | iOS (Supervised) iPadOS (Supervised) macOS Shared iPad visionOS 2.0 |
Stop AirPlay mirroring | iOS iPadOS |
Unlock a user account | macOS |