Restrictions for macOS

Follow

Restriction configuration profiles are described thoroughly in the About restrictions article. It explains how to configure and deploy restrictions for managed devices, and also how the restrictions can be lifted.

This article focuses on introducing what restrictions are supported for Apple macOS devices and whether there are any platform-specific requirements for the use of restrictions.

 

Requirements

Restriction configuration profiles can be applied to all Apple macOS devices that are managed with Miradore.  Restriction configuration profiles are available in the Miradore Business and Enterprise plans. The restriction configuration profiles are not included in the Miradore Free plan.

 

Available restrictions

Below you can find a list of all restrictions supported on the Apple macOS platform. Tab names are underlined.
 
 
Applications
 
Deny Camera
 
Defines if camera devices are disabled from the device. Users won't be able to use, for example, Photo Booth app with built-in web camera.
 
Deny Game Center
 
Defines if users are denied to configure Game Center accounts.
 
Game Center: Deny adding friends
 
Defines if adding friends to Game Center is denied.
 
Game Center: Deny multiplayer gaming
 
Defines if multiplayer gaming is denied.
 
Deny iTunes file sharing
 
Defines if iTunes application file sharing services are denied.
 
Deny Safari auto-fill
 
Defines if Safari auto-fill is denied.
 
 
Device functionality
 
Deny AirDrop
 
Defines if AirDrop is denied.
 
Deny content caching
 
Defines if content caching is denied. Available in macOS 10.13 and later.
 
Deny definition lookup
 
Defines if definition lookup is denied. Users can’t double-click to search for a word’s definition. Available in macOS 10.11.2 and later.
 
Deny Dictation
 
Defines if use of dictation input is denied.
 
Deny Handoff
 
Defines if users are denied of using handoff clipboard.
 
Deny Internet search results in Spotlight
 
Defines if Spotlight won’t return any results from an Internet search.
 
Deny music service
 
Defines if music service is disabled and Music app reverts to classic mode. Available in macOS 10.12 and later.
 
Force delayed software updates
 
Defines if the user visibility of Software updates are delayed (seed build updates will be allowed without delay). Available in macOS 10.13 and later.
 
Software update delay time (1-90 days)
 
Allows the admin to set how many days Software updates on the device will be delayed. Device user will not see a Software update until the specified number of days have passed after the release date. Supported values are 1-90 days. Available in macOS 10.13.4 and later.
 
 
Security and Privacy
 
Deny auto unlock
 
Defines if macOS auto unlock is denied. Available in macOS 10.12 and later.
 
Deny diagnostic data upload
 
Defines if the device is prevented from automatically submitting diagnostic reports to Apple.
 
Deny fingerprint unlock
 
Defines if fingerprint unlock is denied. Users must use a passcode to unlock the device. Available in macOS 10.12.4 and later.
 
Deny passcode modification
 
Denies device passcode from being added, changed, or removed.
 
Deny password auto-fill
 
Defines if users will not be able to use the auto-fill passwords features, and will not be prompted to use saved passwords in Safari or apps. Available in macOS 10.14 and later.
 
Deny password proximity requests
 
Defines if the device will not request passwords from nearby devices. Available in macOS 10.14 and later.
 
Deny password sharing
 
Defines if users cannot share their passwords with the Airdrop Passwords feature. Available in macOS 10.14 and later.
 
Deny wallpaper modification
 
Denies changes to the wallpaper.
 
 
ICloud
 
Deny address book
 
Defines if iCloud address book services are denied.
 
Deny bookmarks
 
Defines if iCloud bookmark sync is denied.
 
Deny calendar
 
Defines if iCloud calendar services are denied.
 
Deny desktop and documents
 
Defines if iCloud desktop and document services are denied. Available in macOS 10.12.4 and later.
 
Deny document sync
 
Defines if document and key-value syncing to iCloud is denied.
 
Deny keychain sync
 
Denies keychain synchronization to iCloud. Available in macOS 10.12 and later.
 
Deny mail
 
Defines if iCloud mail services are denied
 
Deny notes
 
Defines if iCloud notes services are denied.
 
Deny Photo Library
 
Defines if iCloud Photo Library is denied. Any photos not fully downloaded from iCloud Photo Library to the device will be removed from local storage. Available in macOS 10.12 and later.
 
Deny reminders
 
Defines if iCloud reminder services are denied.
 

Please send comments to contact@miradore.com.