Skip to main content
This Library Item is available for Apple devices
Restrictions limit user access to device features, apps, and system behavior. Use the Apple Restrictions Library Item to apply those limits on iPhone, iPad, Mac, Apple TV, and Vision through Blueprints. Many Apple restrictions require a supervised device. For company-owned Android work profile devices, see Configure the Android Restrictions Library Item.

​
Add an Apple Restrictions Library Item

Configure device restrictions for iPhone, iPad, Mac, Apple TV, and Vision using the Apple Restrictions Library Item. To add this Library Item to your Iru Endpoint Library, follow the steps outlined in the Library Overview article. When you choose Add Library Item, select Apple Restrictions to create an Apple Restrictions Library Item.
1

Name the Library Item

Give the Apple Restrictions Library Item a Name.
2

Select Device Types

In the Install on field, select the device types you want to target (iPhone, iPad, Mac, Apple TV, or Vision).
3

Assign to Blueprints

Assign to your desired Blueprints.
4

Configure Restrictions

Configure the restriction settings you need.
5

Save Configuration

Select Save.

​
Apple Restrictions Reference

This reference groups Apple restrictions by category as shown in the Iru Endpoint web app. Each restriction includes platform tags and availability text as provided by Apple.
  • Disallow installing apps and updates: Users are prevented from installing or updating apps using the App Store or host apps (Apple Configurator, Xcode). Also prevents installation and use of marketplace apps and marketplace-hosted apps in the European Union. The App Store is disabled, and its icon is removed from the Home Screen. Requires a supervised device.
    • Platforms: iPad, iPhone, Vision, Supervised
  • Disallow installing apps and updates from the device: Users are prevented from installing or updating apps using the App Store. The App Store is disabled, and its icon is removed from the Home Screen. Host apps (Apple Configurator, Xcode) can still install and update apps. Requires a supervised device.
    • Platforms: iPad, iPhone, Vision, Supervised
  • Disallow marketplace apps and marketplace-hosted apps: Disallow installing marketplace apps and marketplace-hosted apps in the European Union. Requires a supervised device. Available in iOS 17.4 and later.
    • Platforms: iPad, iPhone, Supervised
  • Disallow modifying the default browser app: Prevents a user from modifying the default browser app. Available in iPadOS 18.2 and later and iOS 18.2 and later. Requires a supervised device.
    • Platforms: iPad, iPhone, Supervised
  • Disallow modifying the default calling app: Prevents a user from modifying the default calling app. Available in iPadOS 18.4 and later and iOS 18.4 and later. Requires a supervised device.
    • Platforms: iPad, iPhone, Supervised
  • Disallow modifying the default messaging app: Prevents a user from modifying the default messaging app. Available in iPadOS 18.4 and later and iOS 18.4 and later. Requires a supervised device.
    • Platforms: iPad, iPhone, Supervised
  • Disallow app installation directly from websites: Disallow installing apps directly from websites in the European Union. Requires a supervised device. Available in iOS 17.5 and later.
    • Platforms: iPad, iPhone, Supervised
  • Disallow in-app purchases: In-app purchasing is prohibited.
    • Platforms: iPad, iPhone
  • Disallow automatically downloading apps: Automatic downloading of apps purchased on other devices using the same Apple Account is prohibited. This setting doesn’t affect updates to existing apps. Requires a supervised device. Available in visionOS 27 and later.
    • Platforms: iPad, iPhone, Vision, Supervised
  • Disallow removing apps: Users are unable to remove apps from the device, including marketplace apps and marketplace-hosted apps in the European Union. Requires a supervised device.
    • Platforms: iPad, iPhone, Supervised
  • Disallow removing system apps: Users are unable to remove system apps from the device. Requires a supervised device.
    • Platforms: iPad, iPhone, Vision, Supervised
  • Disallow use of FaceTime: The FaceTime app is disabled, and its icon is removed from the Home Screen. Requires a supervised device.
    • Platforms: iPad, iPhone, Vision, Supervised
  • Disallow use of Messages: On iPhone, the Messages app allows SMS text messaging, but not iMessage. On iPad, the Messages app is disabled, and its icon is removed from the Home Screen. Requires a supervised device.
    • Platforms: iPad, iPhone, Supervised
  • Disallow use of News: The News app is disabled, and its icon is removed from the Home Screen. Requires a supervised device.
    • Platforms: iPad, iPhone, Supervised
  • Disallow use of Podcasts: The Podcasts app is disabled, and its icon is removed from the Home Screen. Requires a supervised device.
    • Platforms: iPad, iPhone, Supervised
  • Enforce app ratings: Manage the maximum level of app content allowed on the device. Apps that do not meet ratings compliance in the App Store will be unavailable for download. On iPhone and iPad devices (but not Mac computers), existing apps on the device that are out of compliance will be disabled and removed from the Home Screen.
    • Platforms: Mac, iPad, iPhone, Apple TV
  • Disallow App Clips: Prevents a user from adding any App Clips, and removes any existing App Clips on the device.
    • Platforms: iPad, iPhone, Supervised
  • Delay App Software Updates: Delays user visibility of non-OS Software Updates. Requires a supervised device.
  • Disallow apps to be locked: Disallow apps to be locked in iOS and iPadOS 18 and later. Requires a supervised device. Note: Applying this restriction will also prevent apps from being able to be hidden.
    • Platforms: iPad, iPhone, Supervised
  • Disallow apps to be hidden: Disallow apps to be hidden in iOS and iPadOS 18 and later. Requires a supervised device.
    • Platforms: iPad, iPhone, Supervised
  • Disallow Rosetta usage awareness: Turns off Rosetta usage awareness, which prevents a pop-up dialog being displayed to the user indicating that Rosetta will be removed in a future version of macOS. Requires a supervised device. Available in macOS 26.4 and later.
    • Platforms: Mac, Supervised
  • Manage App Block List: Choose to block specific apps from being used, or specify that only listed apps are allowed. Restricted apps are disabled and hidden from the Home Screen. This also applies to use of marketplace apps and marketplace-hosted apps in the European Union. Requires a supervised device. Available in visionOS 27 and later.
    • Platforms: iPad, iPhone, Apple TV, Vision, Supervised
  • Autonomous Single App Mode: Allow listed apps to autonomously enter Single App Mode. Requires a supervised device.
    • Platforms: iPad, iPhone, Supervised
  • Disallow passcode modification: Prevents the user from adding, changing, or removing device passcodes (iPhone and iPad) or user account passcodes (Mac). iPhone and iPad devices must be supervised.
    • Platforms: Mac, iPad, iPhone, Vision, Supervised
  • Disallow adding or removing Face ID / Touch ID data: Prevents the user from modifying Touch ID or Face ID. Requires a supervised device.
    • Platforms: Mac, iPad, iPhone, Vision, Supervised
  • Disallow using Face ID / Touch ID for device unlock: Prevents Touch ID or Face ID from unlocking a device.
    • Platforms: Mac, iPad, iPhone, Vision
  • Disallow using Apple Watch for device unlock: Prevents Apple Watch from being used to automatically unlock a Mac or iPhone.
    • Platforms: Mac, iPhone
  • Enforce Fingerprint Timeout: The number of hours after which the fingerprint unlock will require a password to authenticate.
    • Platforms: Mac
  • Disallow voice dialing while device is locked: Disables voice dialing if the device is locked with a passcode.
    • Platforms: iPad, iPhone
  • Disallow Control Center on lock screen: Prevents Control Center from appearing on the Lock Screen.
    • Platforms: iPad, iPhone
  • Disallow Notifications Center on lock screen: Prevents notifications from appearing on the Lock Screen.
    • Platforms: iPad, iPhone
  • Disallow Today view on lock screen: Hides Today View in Notification Center on the Lock Screen. Also available for User Enrollment.
    • Platforms: iPad, iPhone
  • Disallow Wallet notifications on lock screen: Prevents Wallet notifications from appearing on the Lock Screen.
    • Platforms: iPad, iPhone
  • Allow USB accessories while device is locked: Allows the device to always connect to USB accessories while locked. On macOS, allows new USB accessories to connect without authorization. Requires a supervised device.
    • Platforms: Mac, iPad, iPhone, Supervised
  • Enable captive Wi-Fi portal for login and unlock: If enabled, the Mac allows use of the captive Wi-Fi portal at login or unlock. Requires a supervised device. Available in macOS 27 and later.
    • Platforms: Mac, Supervised
  • Enable Wi-Fi network selection for login and unlock: If enabled, the Mac allows the user to select Wi-Fi networks at login or unlock. Requires a supervised device. Available in macOS 27 and later.
    • Platforms: Mac, Supervised
  • Disallow changing account settings: Users are prevented from adding, removing, or modifying accounts (mail, contacts, calendars). Requires a supervised device.
    • Platforms: Mac, iPad, iPhone, Vision, Supervised
  • Disallow AutoFill Passwords: Disables the AutoFill Passwords feature, and the user isn’t prompted to use saved passwords in apps, including Safari. This restriction also disables Automatic Strong Passwords, and strong passwords are no longer suggested to users. iPhone and iPad devices must be supervised.
    • Platforms: Mac, iPad, iPhone, Vision, Supervised
  • Require authentication before using AutoFill Passwords: Users must authenticate before passwords or credit card information can be autofilled in apps, including Safari. Only supported on devices with Face ID or Touch ID. Requires a supervised device.
    • Platforms: iPad, iPhone, Vision, Supervised
  • Disallow Password Sharing: Users are prevented from sharing passwords with the AirDrop Passwords feature. iPhone and iPad devices must be supervised.
    • Platforms: Mac, iPad, iPhone, Vision, Supervised
  • Disallow proximity based password sharing requests: Prevents devices from requesting passwords from nearby devices. iPhone and iPad devices must be supervised.
    • Platforms: Mac, iPad, iPhone, Apple TV, Supervised
  • Disallow Proximity Setup for New Devices: Disables the prompt to set up new devices that are nearby. Requires a supervised device.
    • Platforms: iPad, iPhone, Supervised
  • Disallow opening documents from managed sources in unmanaged destinations: Documents in managed apps and accounts only open in other managed apps and accounts.
    • Platforms: iPad, iPhone, Vision
  • Disallow opening documents from unmanaged sources in managed destinations: Documents in unmanaged apps and accounts only open in other unmanaged apps and accounts.
    • Platforms: iPad, iPhone, Vision
  • Allow managed apps to write contacts to unmanaged contacts accounts: Managed apps can write contacts to unmanaged contacts accounts.
    • Platforms: iPad, iPhone, Vision
  • Allow unmanaged apps to read contacts from managed contacts accounts: Unmanaged apps can read from managed contacts accounts.
    • Platforms: iPad, iPhone, Vision
  • Disallow iCloud Address Book: Disables iCloud Address Book services.
    • Platforms: Mac
  • Disallow iCloud Bookmarks: Disables iCloud Bookmark sync.
    • Platforms: Mac
  • Disallow iCloud Calendar: Disables iCloud Calendar services.
    • Platforms: Mac
  • Disallow iCloud Mail: Disables iCloud Mail services.
    • Platforms: Mac
  • Disallow iCloud Notes: Disables iCloud Notes services.
    • Platforms: Mac
  • Disallow iCloud Reminders: Disables iCloud Reminders services.
    • Platforms: Mac
  • Disallow iCloud Drive: Disables document and app data syncing to iCloud. iPhone and iPad devices must be supervised.
    • Platforms: Mac, iPad, iPhone, Vision, Supervised
  • Disallow iCloud Desktop & Documents: Disables syncing Desktop and Documents folders to iCloud.
    • Platforms: Mac
  • Disallow iCloud Keychain: Disables syncing the Keychain to iCloud. iPhone and iPad devices must be supervised.
    • Platforms: Mac, iPad, iPhone, Vision, Supervised
  • Disallow iCloud Photo Library: Disables the iCloud Photo Library.
    • Platforms: Mac, iPad, iPhone, Vision
  • Disallow iCloud Photo Stream: Disables the iCloud Photo Stream.
    • Platforms: iPad, iPhone
  • Disallow iCloud Shared Photo Stream: Disables the iCloud Shared Photo Stream.
    • Platforms: iPad, iPhone
  • Disallow device backup to iCloud: Disables backing up the device to iCloud. Requires a supervised device.
    • Platforms: iPad, iPhone, Vision, Supervised
  • Disallow managed app data storage in iCloud: Prevents managed apps from using iCloud sync.
    • Platforms: iPad, iPhone, Vision
  • Disallow Handoff: Disables activity continuation.
    • Platforms: Mac, iPad, iPhone, Vision
  • Disallow iCloud Private Relay: Prevents the user from turning on iCloud Private Relay.
    • Platforms: Mac, iPad, iPhone, Vision, Supervised
  • Disallow iPhone Widgets on Mac: Prevents syncing of iPhone widgets on a Mac with iCloud. Requires a supervised device.
    • Platforms: iPad, iPhone, Supervised
  • Disallow Freeform Document Syncing: Prevents a user from syncing Freeform documents with iCloud.
    • Platforms: Mac
  • Force Wi-Fi power on: Prevents Wi-Fi from being turned off in Settings or Control Center, even by entering or leaving Airplane Mode. It does not prevent selecting which Wi-Fi network to use. Requires a supervised device.
    • Platforms: iPad, iPhone, Supervised
  • Only allow managed Wi-Fi networks: Devices can only join Wi-Fi networks configured by a configuration profile. Requires a supervised device.
    • Platforms: iPad, iPhone, Vision, Supervised
  • Disallow modifying Bluetooth settings: Prevents the user from changing Bluetooth settings. Requires a supervised device.
    • Platforms: Mac, iPad, iPhone, Supervised
  • Disallow adding VPN configurations: Prevents the creation of VPN configurations. Requires a supervised device.
    • Platforms: iPad, iPhone, Vision, Supervised
  • Disallow NFC: Disables Near Field Communication (NFC) on the device.
    • Platforms: iPhone, Supervised
  • Disallow modifying cellular plan settings: Prevents users from changing settings related to their cellular plan. Requires a supervised device.
    • Platforms: iPad, iPhone, Supervised
  • Disallow modifying cellular data app settings: Prevents users from changing settings for app cellular data usage. Requires a supervised device.
    • Platforms: iPad, iPhone, Supervised
  • Disallow modifying Personal Hotspot settings: Users are prevented from making modifications to the Personal Hotspot setting. Requires a supervised device.
    • Platforms: iPad, iPhone, Supervised
  • Disallow global background fetch activity when roaming: Disables background fetch activity for apps when roaming.
    • Platforms: iPad, iPhone
  • Disallow modifying eSIM settings: Users are prevented from making modifications to the eSIM setting. Requires a supervised device.
    • Platforms: iPad, iPhone, Supervised
  • Disallow eSIM outgoing transfers: Prevent the transfer of an eSIM from the device on which the restriction is installed to a different device. Requires a supervised device. Available in iOS and iPadOS 18 and later.
    • Platforms: iPad, iPhone, Supervised
  • Force preserve eSIM on erase: Preserves eSIM when a device is erased due to too many failed password attempts or Erase All Content and Settings. The eSIM is not preserved if Find My initiates the erase. Requires a supervised device. Available in iOS and iPadOS 17.2 and later.
    • Platforms: iPad, iPhone, Supervised
  • Disallow Live Voicemail: Disallow the use of Live Voicemail. Requires a supervised device. Available in iOS 17.2 and later.
    • Platforms: iPhone, Supervised
  • Disallow RCS messaging: Disallow the use of RCS messaging in Messages. Available in iOS and iPadOS 18.1 and later. Requires a supervised device.
    • Platforms: iPad, iPhone, Supervised
  • Disallow call recording: Disallow call recording. Available in iOS 18.1 and later. Requires a supervised device.
    • Platforms: iPhone, Supervised
  • Deny ICCIDs for iMessage & FaceTime: Prevents use of iMessage and FaceTime for listed ICCIDs. The list must contain no more than 4 ICCIDs. Available in iPadOS 26 and later and iOS 26 and later. Requires a supervised device.
    • Platforms: iPad, iPhone, Supervised
  • Deny ICCIDs for RCS: Prevents the use of RCS for listed ICCIDs. The list must contain no more than 4 ICCIDs. Available in iPadOS 26 and later and iOS 26 and later. Requires a supervised device.
    • Platforms: iPad, iPhone, Supervised
  • Disallow AirDrop: Disables AirDrop file sharing. iPhone and iPad devices must be supervised.
    • Platforms: Mac, iPad, iPhone, Vision, Supervised
  • Disallow sharing managed documents using AirDrop: Forces managed apps to treat AirDrop as an unmanaged destination.
    • Platforms: iPad, iPhone, Vision
  • Disallow incoming AirPlay requests: Disables incoming AirPlay requests. Requires a supervised device.
    • Platforms: Mac, Apple TV, Supervised
  • Require password for incoming AirPlay requests: Forces all devices sending AirPlay requests to the device to use a pairing password.
    • Platforms: iPad, iPhone
  • Require password for outgoing AirPlay requests: Forces all devices receiving AirPlay requests from the device to use a pairing password.
    • Platforms: iPad, iPhone
  • Disallow AirPrint: Disables AirPrint printing. Requires a supervised device.
    • Platforms: iPad, iPhone, Supervised
  • Disallow storage of AirPrint credentials in Keychain: Disables Keychain storage of usernames and passwords for AirPrint. Requires a supervised device.
    • Platforms: iPad, iPhone, Supervised
  • Disallow discovery of AirPrint printers using iBeacons: Disables iBeacon discovery of AirPrint printers, which prevents spurious AirPrint Bluetooth beacons from phishing for network traffic. Requires a supervised device.
    • Platforms: iPad, iPhone, Supervised
  • Disallow AirPrint to destinations with untrusted certificates: Requires trusted certificates for TLS printing communication. Requires a supervised device.
    • Platforms: iPad, iPhone, Supervised
  • Disallow pairing with Apple Watch: Disables pairing with an Apple Watch. Any currently paired Apple Watch is unpaired and the watch’s content is erased. Requires a supervised device.
    • Platforms: iPad, iPhone, Supervised
  • Enforce Apple Watch wrist detection: Forces a paired Apple Watch to use Wrist Detection to lock it when the user takes it off.
    • Platforms: iPad, iPhone
  • Disallow sending diagnostics and usage data to Apple: Prevents the device from automatically submitting diagnostic reports to Apple.
    • Platforms: Mac, iPad, iPhone, Vision
  • Disallow modifying diagnostics settings: Disables changing the diagnostic submission and app analytics settings in the Diagnostics & Usage UI in Settings. Requires a supervised device.
    • Platforms: iPad, iPhone, Vision, Supervised
  • Disallow network drive access in Files app: Prevents connecting to network drives in the Files app. Requires a supervised device.
    • Platforms: iPad, iPhone, Vision, Supervised
  • Disallow USB drive access in Files app: Prevents connecting to any connected USB devices in the Files app. Requires a supervised device.
    • Platforms: iPad, iPhone, Supervised
  • Disallow Find My Devices: Disables Find My Device in the Find My app. iPhone and iPad devices must be supervised.
    • Platforms: Mac, iPad, iPhone, Supervised
  • Disallow Find My Friends: Disables Find My Friends in the Find My app. iPhone and iPad devices must be supervised.
    • Platforms: Mac, iPad, iPhone, Supervised
  • Disallow modifying Find My Friends settings: Disables changes to Find My Friends. Requires a supervised device.
    • Platforms: iPad, iPhone, Supervised
  • Disallow use of Game Center: Disables Game Center, and its icon is removed from the Home Screen. iPhone and iPad devices must be supervised.
    • Platforms: Mac, iPad, iPhone, Supervised
  • Disallow adding Game Center friends: Prohibits adding friends to Game Center. iPhone and iPad devices must be supervised.
    • Platforms: Mac, iPad, iPhone, Supervised
  • Disallow multiplayer gaming: Prohibits multiplayer gaming. iPhone and iPad devices must be supervised.
    • Platforms: Mac, iPad, iPhone, Supervised
  • Disallow auto correction: Disables keyboard autocorrection. Requires a supervised device.
    • Platforms: iPad, iPhone, Supervised
  • Disallow spell check: Disables keyboard spell-check. Requires a supervised device.
    • Platforms: iPad, iPhone, Supervised
  • Disallow predictive keyboard: Disables predictive keyboards. Requires a supervised device.
    • Platforms: iPad, iPhone, Supervised
  • Disallow definition lookup: Disables definition lookup. iPhone and iPad devices must be supervised.
    • Platforms: Mac, iPad, iPhone, Supervised
  • Disallow dictation input: Disallows dictation input. iPhone and iPad devices must be supervised.
    • Platforms: Mac, iPad, iPhone, Supervised
  • Disallow keyboard shortcuts: Disables keyboard shortcuts. Requires a supervised device.
    • Platforms: iPad, iPhone, Supervised
  • Disallow Continuous Path keyboard: Disables QuickPath keyboard. Requires a supervised device.
    • Platforms: iPad, iPhone, Supervised
  • Disallow use of Apple Books: Disables Apple Books. iPhone and iPad devices must be supervised.
    • Platforms: Mac, iPad, iPhone, Supervised
  • Disallow explicit sexual content in Apple Books: Users can’t download Apple Books media that is tagged as erotica.
    • Platforms: Mac, iPad, iPhone, Apple TV
  • Disallow backup of enterprise books: Disables backup of Enterprise books.
    • Platforms: iPad, iPhone
  • Disallow notes and highlights sync of enterprise books: Disables sync of Enterprise books, notes, and highlights.
    • Platforms: iPad, iPhone
  • Disallow use of Apple Music: Disables the Music service, and the Music app reverts to classic mode. iPhone and iPad devices must be supervised.
    • Platforms: Mac, iPad, iPhone, Supervised
  • Disallow use of Apple Music Radio: Disables Apple Music Radio. Requires a supervised device.
    • Platforms: iPad, iPhone, Supervised
  • Disallow use of iTunes Store: Disables the iTunes Music Store, and its icon is removed from the Home Screen. Users cannot preview, purchase, or download content. Requires a supervised device.
    • Platforms: iPad, iPhone, Supervised
  • Require iTunes Store password for all purchases: Forces the user to enter their iTunes password for each transaction.
    • Platforms: iPad, iPhone
  • Disallow playback of explicit music, podcasts, and iTunes U media: Hides explicit music or video content purchased from the iTunes Store. Explicit content is marked as such by content providers, such as record labels, when sold through the iTunes Store. iPhone and iPad devices must be supervised.
    • Platforms: Mac, iPad, iPhone, Apple TV, Supervised
  • Disallow iTunes file sharing services: Disables iTunes file sharing services.
    • Platforms: Mac
  • Manage Movie rating restrictions: Enforce the maximum level of movie content allowed on the device.
    • Platforms: Mac, iPad, iPhone, Apple TV
  • Manage TV Show rating restrictions: Enforce the maximum level of TV content allowed on the device.
    • Platforms: Mac, iPad, iPhone, Apple TV
  • Defer software updates: Delays user visibility of software updates. In macOS, seed build updates are allowed, without delay. iPhone and iPad devices must be supervised. Learn more about Software Updates and their deferral limits.
Defer software updates is deprecated as of iOS 27, iPadOS 27, tvOS 27, and macOS 27. Use the Software Update Library Item instead. See Delay and Enforce OS Updates.
  • Platforms: Mac, iPad, iPhone, Apple TV, Supervised
  • Disallow Background Security Improvement installation: Prevents installation of Apple Background Security Improvements (formerly known as Rapid Security responses). Devices must be supervised.
Disallow Background Security Improvement installation is deprecated as of iOS 27, iPadOS 27, and macOS 27. Use the Software Update Library Item instead.
  • Platforms: Mac, iPad, iPhone, Supervised
  • Disallow Background Security Improvement removal: Prevents removal of Apple Background Security Improvements (formerly known as Rapid Security responses). Devices must be supervised.
Disallow Background Security Improvement removal is deprecated as of iOS 27, iPadOS 27, and macOS 27. Use the Software Update Library Item instead.
  • Platforms: Mac, iPad, iPhone, Supervised
  • Disallow use of Safari: Disables the Safari web browser app, and its icon is removed from the Home Screen. This setting also prevents users from opening web clips. Requires a supervised device.
    • Platforms: iPad, iPhone, Supervised
  • Disallow Safari AutoFill: Disables Safari Autofill. iPhone and iPad devices must be supervised.
    • Platforms: Mac, iPad, iPhone, Vision, Supervised
  • Disallow Safari pop-ups: Disables pop-up windows in Safari.
    • Platforms: iPad, iPhone
  • Force Safari fraud warnings: Enables fraud warnings in Safari.
    • Platforms: iPad, iPhone
  • Disallow Safari Javascript: Disables the use of Javascript in Safari.
    • Platforms: iPad, iPhone
  • Manage Safari cookies: Enforce cookie settings for Safari.
    • Platforms: iPad, iPhone
  • Allow deprecated TLS versions in Safari: Allow the use of deprecated TLS versions 1.0/1.1 in Safari.
    • Platforms: Mac, iPad, iPhone
  • Disallow Safari history clearing: Prevents a user from clearing browsing history in Safari. Available in iPadOS 26 and later, visionOS 26 and later, macOS 26 and later, and iOS 26 and later. Requires a supervised device.
    • Platforms: Mac, iPad, iPhone, Vision, Supervised
  • Disallow Safari private browsing: Prevents a user from enabling private browsing in Safari. Available in iPadOS 26 and later, visionOS 26 and later, macOS 26 and later, and iOS 26 and later. Requires a supervised device.
    • Platforms: Mac, iPad, iPhone, Vision, Supervised
  • Disallow use of Siri: Disables Siri.
    • Platforms: Mac, iPad, iPhone, Vision
  • Disallow use of Siri while device is locked: Disables Siri when the device is locked. This restriction is ignored if the device doesn’t have a passcode set.
    • Platforms: iPad, iPhone
  • Disallow user-generated content in Siri: Prevents Siri from querying user-generated content from the web. Requires a supervised device.
    • Platforms: iPad, iPhone, Supervised
  • Enable Siri profanity filter: Forces the use of the profanity filter with Siri. iPhone and iPad devices must be supervised.
    • Platforms: Mac, iPad, iPhone, Supervised
  • Force on device translation: Prevent the device from connecting to the Siri servers for translations.
    • Platforms: iPad, iPhone
  • Force on device dictation: Prevent the device from connecting to the Siri servers for dictation. On Mac, this applies to computers with Apple silicon.
    • Platforms: Mac, iPad, iPhone, Vision
  • Automatically reject untrusted HTTPS certificates: Automatically rejects untrusted HTTPS certificates without prompting the user.
    • Platforms: iPad, iPhone, Vision
  • Disallow manual installation of configuration profiles and certificates: Prohibits the user from installing configuration profiles and certificates interactively. Requires a supervised device.
    • Platforms: Mac, iPad, iPhone, Vision, Supervised
  • Disallow OTA PKI updates: Disables over-the-air PKI updates. Setting this restriction to false doesn’t disable CRL and OCSP checks.
    • Platforms: iPad, iPhone
  • Disallow “Trust Enterprise Developer” option: Remove the Trust Enterprise Developer button in Settings > General > Profiles & Device Management, preventing apps from being provisioned by universal provisioning profiles. This restriction applies to free developer accounts. It doesn’t apply to enterprise app developers who are trusted because their apps were pushed through APNs. It also doesn’t revoke previously granted trust.
    • Platforms: iPad, iPhone, Vision
  • Force automatic date and time: Enables the Set Automatically feature in Date & Time, and this can’t be disabled by the user. The device’s time zone is updated only when the device can determine its location using a cellular connection or Wi-Fi with location services enabled. Requires a supervised device.
    • Platforms: iPad, iPhone, Apple TV, Vision, Supervised
  • Force encrypted backups: Requires that all backups be encrypted.
    • Platforms: iPad, iPhone
  • Force limited ad tracking: Limits ad tracking on Apple’s ad platform. Additionally, it disables app tracking and the Allow Apps To Request To Track setting.
    • Platforms: Mac, iPad, iPhone
  • Disallow Apple personalized advertisements: Limits Apple personalized advertising.
    • Platforms: Mac, iPad, iPhone, Vision
  • Disallow Mail Privacy Protection: Disables Mail Privacy Protection on the device. Requires a supervised device.
    • Platforms: iPad, iPhone, Supervised
  • Disallow use of camera: Disables the camera, and its icon is removed from the Home Screen. Users are unable to take photographs. iPhone and iPad devices must be supervised. Available in visionOS 27 and later.
    • Platforms: Mac, iPad, iPhone, Vision, Supervised
  • Disallow modifying device name: Warning: This restriction, which prevents the device name from being changed, has been moved to the Device Name Library Item.
    • Platforms: Mac, iPad, iPhone, Apple TV, Vision, Supervised
  • Disallow Erase All Content and Settings: Disable Erase All Content and Settings. Requires a supervised device.
    • Platforms: Mac, iPad, iPhone, Vision, Supervised
  • Disallow modifying notification settings: Prevents changing notification settings. Requires a supervised device.
    • Platforms: iPad, iPhone, Vision, Supervised
  • Disallow use of Screen Time: Disables the “Enable Screen Time” option in the Screen Time UI in Settings and disables Screen Time if already enabled. Requires a supervised device.
    • Platforms: iPad, iPhone, Vision, Supervised
  • Disallow screenshots and screen recording: Disables saving a screenshot of the display and capturing a screen recording.
    • Platforms: Mac, iPad, iPhone, Vision
  • Disallow Spotlight internet search results: Disables Spotlight Internet search results.
    • Platforms: Mac, iPad, iPhone
  • Disallow modifying Wallpaper: Prevents wallpaper from being changed. iPhone and iPad devices must be supervised.
    • Platforms: Mac, iPad, iPhone, Supervised
  • Disallow guest user: Disallow the ability to log in as a Guest user on iPad devices configured as Shared iPad.
    • Platforms: iPad
  • Disallow auto dim: Prevents auto dim on iPad models with OLED displays. Available in iOS and iPadOS 17.4 and later.
    • Platforms: iPad, iPhone, Supervised
  • Disallow Remote app pairing: Disables pairing Apple TV for use with the Remote app or Control Center widget. Requires a supervised device.
    • Platforms: Apple TV, Supervised
  • Disallow pairing with non-Configurator hosts: Disables host pairing with the exception of the supervision host. If no supervision host certificate has been configured, all pairing is disabled. Requires a supervised device.
    • Platforms: iPad, iPhone, Supervised
  • Disallow device sleeping: Prevents device from sleeping. Requires a supervised device.
    • Platforms: Apple TV, Supervised
  • Allow boot to recovery by unpaired device: Allows devices to be booted into recovery by an unpaired device. Requires a supervised device.
    • Platforms: iPad, iPhone, Supervised
  • Disallow Apple TV automatic screensaver: Disables the Apple TV from automatically starting the screensaver after inactivity.
    • Platforms: Apple TV
  • Disallow use of Content Caching service: Disables content caching.
    • Platforms: Mac
  • Disallow Universal Control: Disables Universal Control, which allows the Mac computer’s trackpad and keyboard to control additional Mac or iPad devices nearby.
    • Platforms: Mac
  • Disallow startup disk modification: Prevents the user from selecting a different startup disk.
    • Platforms: Mac
  • Disallow Time Machine backup: Prevents the user from setting up and using Time Machine.
    • Platforms: Mac
  • Disallow local user creation: Prevents a user with the role of administrator from creating new users in Users & Groups in System Settings.
    • Platforms: Mac
  • Bypass screen capture alerts: Prevents user notifications for content capture technologies in macOS 15.1 and later.
    • Platforms: Mac, Supervised
  • Disallow File Sharing modification: Prevents a user from changing the state of the File Sharing service in System Settings.
    • Platforms: Mac
  • Disallow Printer Sharing modification: Prevents a user from changing the state of the Printer Sharing service in System Settings.
    • Platforms: Mac
  • Disallow Remote Management modification: Prevents a user from changing the state of the Remote Management service in System Settings.
    • Platforms: Mac
  • Disallow Remote Apple Events modification: Prevents a user from changing the state of the Remote Apple Events service in System Settings.
    • Platforms: Mac
  • Disallow Internet Sharing modification: Prevents a user from changing the state of the Internet Sharing service in System Settings.
    • Platforms: Mac
  • Disallow Bluetooth Sharing modification: Prevents a user from changing the state of the Bluetooth Sharing service in System Settings.
    • Platforms: Mac
  • Disallow Media Sharing modification: Prevents a user from changing the state of the Media Sharing service in System Settings. Available in macOS 15.1 and later.
    • Platforms: Mac, Supervised
  • Disallow iPhone Mirroring: Prevents the use of iPhone Mirroring. When used on macOS, this prevents the Mac from mirroring any iPhone. When used on iOS, this prevents the iPhone from mirroring to any Mac. Requires a supervised device. Available in macOS 15 and later and iOS 18 and later.
    • Platforms: Mac, iPhone, Supervised
  • Disallow remote screen control via FaceTime: Prevents the ability for a remote FaceTime session to request control of the device. Requires a supervised device. Available in iOS and iPadOS 18 and later.
    • Platforms: iPad, iPhone, Supervised
  • Disallow Apple Intelligence reports: When checked, disallows Apple Intelligence reports. Requires a supervised device. Available in iOS and iPadOS 18.4 and later, visionOS 2.4 and later, and macOS 15.4 and later.
    • Platforms: Mac, iPad, iPhone, Vision, Supervised
  • Disallow external intelligence integrations: Prevents the use of external, cloud-based intelligence services with Siri. Cannot be used with Shared iPad. Available in visionOS 2.4 and later, macOS 15.2 and later, and iOS 18.2 and later.
    • Platforms: Mac, iPad, iPhone, Vision, Supervised
  • Disallow external intelligence integrations sign-in: Forces external intelligence providers into anonymous mode. If a user is already signed in to an external intelligence provider, applying this restriction will cause them to be signed out. Cannot be used with Shared iPad. Available in visionOS 2.4 and later, macOS 15.2 and later, and iOS 18.2 and later.
    • Platforms: Mac, iPad, iPhone, Vision, Supervised
  • Allowed external intelligence workspace IDs: When provided, only accounts in the specified workspace in the external intelligence system, such as ChatGPT, can sign in on the device. In ChatGPT, this ID can be found in the admin panel for your enterprise workspace. Requires a supervised device. Available in iOS and iPadOS 18.3 and later, visionOS 2.4 and later, and macOS 15.3 and later.
    • Platforms: Mac, iPad, iPhone, Vision, Supervised
  • Disallow Genmoji: Prohibits creating new Genmoji. Requires a supervised device. Available in iOS and iPadOS 18 and later, visionOS 2.4 and later, and macOS 15 and later.
    • Platforms: Mac, iPad, iPhone, Vision, Supervised
  • Disallow Image Playground: Prohibits the use of image generation. Requires a supervised device. Available in iOS and iPadOS 18 and later, visionOS 2.4 and later, and macOS 15 and later.
    • Platforms: Mac, iPad, iPhone, Vision, Supervised
  • Disallow Image Wand: Prevent the use of Image Wand. Requires a supervised device. Available in iOS and iPadOS 18 and later and visionOS 2.4 and later.
    • Platforms: iPad, iPhone, Vision, Supervised
  • Disallow Personalized Handwriting Results: Prevents generating text in the user’s handwriting. Requires a supervised device. Available in iOS and iPadOS 18 and later.
    • Platforms: iPad, iPhone, Supervised
  • Disallow Mail smart replies: When checked, disallows smart replies in Mail. Requires a supervised device. Available in iOS and iPadOS 18.4 and later, visionOS 2.4 and later, and macOS 15.4 and later.
    • Platforms: Mac, iPad, iPhone, Vision, Supervised
  • Disallow Mail summaries: Disallow the use of the summarize button in Mail. Requires a supervised device. Available in iOS and iPadOS 18.1 and later, visionOS 2.4 and later, and macOS 15.1 and later.
    • Platforms: Mac, iPad, iPhone, Vision, Supervised
  • Disallow transcription in Notes: Prevents transcription in Notes. Available in iPadOS 18.2 and later, visionOS 2.4 and later, macOS 15.2 and later, and iOS 18.2 and later. Requires a supervised device.
    • Platforms: Mac, iPad, iPhone, Vision, Supervised
  • Disallow Notes transcription summary: When checked, disallows transcription summaries in Notes. Requires a supervised device. Available in iOS and iPadOS 18.3 and later, visionOS 2.4 and later, and macOS 15.3 and later.
    • Platforms: Mac, iPad, iPhone, Supervised
  • Disallow summarizing content in Safari: When checked, disallows summarizing content in Safari. Requires a supervised device. Available in iOS and iPadOS 18.4 and later, visionOS 2.4 and later, and macOS 15.4 and later.
    • Platforms: Mac, iPad, iPhone, Vision, Supervised
  • Disallow writing tools: Prevent the user from using Apple Intelligence writing tools. Requires a supervised device. Available in iOS and iPadOS 18 and later, visionOS 2.4 and later, and macOS 15 and later.
    • Platforms: Mac, iPad, iPhone, Vision, Supervised
  • Disallow visual intelligence summarization: Disables visual intelligence summarization. Available in iPadOS 18.3 and later, visionOS 2.4 and later, and iOS 18.3 and later. Requires a supervised device.
    • Platforms: iPad, iPhone, Supervised

​
Important Considerations

Supervision requirements

Many Apple restrictions only apply on supervised devices. Enroll those devices with Automated Device Enrollment or Apple Configurator.

Platform availability

Support varies by device type and OS. Confirm a restriction exists for your targets before you depend on it.

Policy and usability

Tighter restrictions can block legitimate work; looser ones may leave gaps. Set policies to match your risk and how people use devices.

Testing recommendations

Try changes on test hardware first. Undoing some restrictions may require re-enrolling the device.