Mail device management payload settings for Apple devices

You can configure mail accounts for users of an iPhone, iPad, Shared iPad, Mac, or Apple Vision Pro that enrolls in a device management service. Use the Mail payload to configure POP or IMAP mail accounts for users. Apple devices support industry-standard IMAP4 and POP3 mail solutions on a range of server platforms, including macOS, Windows, UNIX, and Linux.

The Mail payload supports the following. For more information, see Payload information.

Supported payload identifier: com.apple.mail.managed
Supported operating systems and channels: iOS, iPadOS, Shared iPad user, macOS user, visionOS 1.1.
Supported enrollment methods: User Enrollment, Device Enrollment, Automated Device Enrollment.
Duplicates allowed: True—more than one Mail payload can be delivered to a user or device.

You can use the settings in the tables below with the Mail payload.

Account settings

Setting	Description	Required
Account description	The display name for the account.	No
Account type	Select POP or IMAP. If IMAP is selected, you can optionally add the path prefix.	Yes
User display name	The display name of the user.	Yes
Account email address	The email address for the account.	Yes
Allow user to move messages from this account	Specify whether email messages can be moved between mail accounts.	No
Allow recent addresses to be synced	Specify whether recently used addresses can be synced across devices.	No
Allow Mail Drop	Specify whether Mail Drop appears as an option when sending large files using the Mail app.	No
Use only in Mail	Specify whether any apps other than the Mail app are able to send email.	No
Enable S/MIME signing	Enable S/MIME signing.	No
Allow S/MIME signing	Allow the user to enable or disable S/MIME signing.	No
S/MIME signing certificate	Select the S/MIME signing certificate.	No
Allow the user to modify the S/MIME signing certificate	Allow the user to modify the S/MIME signing certificate.	No
Force S/MIME encryption	Force S/MIME encryption. Note: If the sender’s public key is absent in the recipients system, this feature isn’t enforced.	No
Allow S/MIME encryption	Allow the user to enable or disable S/MIME encryption.	No
S/MIME encryption certificate	Select the S/MIME encryption certificate.	No
Allow the user to modify the S/MIME encryption certificate	Allow the user to modify the S/MIME encryption certificate.	No
Enable per-message encryption switch	Specify whether users have the option to encrypt messages on a per-message basis.	No

Mail server settings

You can have different settings for both the incoming and outgoing mail server.

Setting	Description	Required
Hostname	The IP address or fully qualified domain name (FQDN) of the mail server.	Yes
Port	The port number of the mail server.	Yes
Account user name	The user name used to connect to the mail server.	Yes
Authentication type	None Password MD5 Challenge-Response NTLM HTTP MD5 Digest	Yes
Account password	The password to the mail server.	No
Outgoing mail server password identical to the incoming mail server	Choose to use the same password for both the incoming and outgoing mail server.	No
Use SSL	When the Use SSL option is selected and the server’s SSL certificate isn’t issued by a trusted certificate authority known to the devices, use the Certificates payload to add any root or intermediate certificates that are necessary to validate the server’s SSL certificate.	No

Note: Each device management service developer implements these settings differently. To learn how various Mail settings are applied to your devices and users, consult your developer’s device management service documentation.

有帮助?

Apple Platform Deployment

Mail device management payload settings for Apple devices

Account settings

Mail server settings