Jump to:navigation, search
Wiki

Configuration restrictions

From Securepoint Wiki





























































































































De.png
En.png
Fr.png









Profile configuration in the Restrictions tab

Last adaption: 07.2024

New:
notempty
This article refers to a Resellerpreview
Access: portal.securepoint.cloud  Mobile Security iOS/iPadOS Profile / Tab Einschränkungen

Partial configuration for profiles in the Mobile Security Portal.
Further information is displayed here:


Einschränkung Default Erläuterung
Demo-Dev-Einschränkung '    Sollte nur im devWiki angezeigt werden
Allow automatic unlocking '    If set to false, the automatic unlocking is disabled
Allow cloud address book '    If set to false, the cloud address book will be disabled
Allow cloud bookmarks '    If set to false, cloud bookmarks will be disabled
Allow cloud calendar '    If set to false, the cloud calendar will be disabled
Allow cloud desktop & documents '    If set to false, cloud desktop and documents will be disabled
Allow cloud mail '    If set to false, cloud mail will be disabled
Allow cloud notes '    If set to false, cloud notes will be disabled
Allow cloud reminders '    If set to false, cloud reminders will be disabled
Allow content caching '    If set to false, content caching will be disabled
Allow iTunes file sharing '    If set to false, iTunes file sharing will be disabled
Allow automatic screen saver '    Allow automatic screen saver
Allow lock screen ControlCenter '    If set to false, the ControlCenter is disabled for the lock screen
Allow lock screen notifications to display '    If set to false, the notification preview of the lock screen will be disabled
Allow lock screen view today '    If set to false, today's lock screen view will be disabled
Allow to write unmanaged contacts '    If set to false, writing unmanaged contacts will be disabled
Allow unmanaged reading of managed contacts '    These restrictions prevent unmanaged apps from accessing contacts of managed accounts and prevent managed apps from saving contacts in the local Contacts app
Allow OTAPKI updates '    If set to false, OTAPKI updates are disabled
Allow temporary session of the shared device '    If set to false, the temporary session of the shared device is disabled
Force password for outgoing AirPlay requests '    If set to true, all devices receiving AirPlay requests from this device will be forced to use a pairing password
Force encrypted backups '    Force encrypted backups
Limit ad tracking '    If set to true, ad tracking will be restricted
Dictation only '    If set to true, connections to Siri servers for dictation are disabled
Force WLAN Allowlist '    Join Wi-Fi networks installed by profiles only
Allow QuickPath keyboard Default:    If set to inactive, the QuickPath keyboard is disabled
Allow network access for files Default:    If inactive, the connection to network drives is prevented in the file app
Allow USB drive for files Default:    When inactive, it prevents the File app from connecting to connected USB devices
Allow Find My Device Default:    When inactive, Find My Device is disabled in the Find my App
Allow Find My Friends Default:    When inactive, Find My Friends is disabled in the Find My app
Force WiFi activation Default:    If set to true, prevents Wi-Fi from being turned off in settings or control center, even by entering or leaving airplane mode. It does not prevent selecting which Wi-Fi network to use.
Erlaubt Enterprise-Apps zu vertrauen Default:    Required for future implementations
Allows the user to trust enterprise apps. (Apps that can be deployed without the iTunes App Store and don't need to be authorized by Apple)
Allow screenshots and screen recording Default:    Allows the user to take screenshots or screen recordings
Apple Music erlauben Default:    If set to false, Apple Music will be disabled in the Music app
iTunes Radio erlauben Default:    If set to false, iTunes Radio will be disabled in the Music app
Allow shared stream Default:    If set to false, the shared stream is disabled
Allow Wallet while locked Default:    If set to false, wallet notifications will not be shown on the lock screen
Allow use of News Default:    Allows the user to access and use News
Allow modifying bluetooth settings Default:    Allow modifying bluetooth settings
Allow modifying cellular data usage for app settings Default:    If set to false, the mobile data uses for app settings cannot be changed
Allow modifying device name Default:    Allows the user to change device names
Allow automatic sync while roaming Default:    Allows automatic synchronization during roaming
Allow iCloud sync for managed apps Default:    Allows iCloud synchronization for managed apps
Allow enterprise books backup Default:    Allows enterprise books to be backed up
Allow enterprise books and highlights to sync Default:    Allows enterprise books to synchronize notes and highlights
Allow email privacy '    If activated, Apple's Mail Privacy Protection (AMPP) is activated
Allow In App purchases Default:    Allows the user to make purchases within applications
Allow multiplayer gaming Default:    Allows multiplayer gaming
Allow voice dialing while device is locked Default:    Allows voice dialing while device is locked
Force Apple Watch wrist detection Default:    Forces Apple watch wrist detection
Allow pairing with Apple Watch Default:    Allows pairing with Apple Watch
Allow Internet results in Spotlight Default:    If set to false, search results from the web will not be shown in Spotlight
Allow user to accept untrusted TLS certificates Default:    Allows user to accept untrusted TLS certificates
Photo-Stream erlauben Default:    Allows Photo Stream to be used on the device
Allow iCloud Photo Library Default:    Allows iCloud photo library to be used on the device
Allow iCloud Backup Default:    Allows backup using iCloud
Allow personalized advertising Default:    When disabled, restricts Apple's personalized advertising. Available in iOS 14 and later.
Requires iTunes password for all purchases Default:    Requires the user's iTunes password to be entered for every purchase
Apps ranking number 1000Link= Der eingegebene Wert beschreibt das maximal erlaubte Level an jugendschutzrelevanten Apps auf dem Gerät.
Possible values based on US valuation levels:
1000 → All
600 → 17
300 → 12+
200 → 9+
100 → 4+
0 → None

The US Parental Guide rating is comparable to the German FSK rating
Movie-Ranking-Nummer 1000Link= Der eingegebene Wert beschreibt das maximal erlaubte Level an jugendschutzrelevanten Filmen auf dem Gerät.
Possible values based on US valuation levels:
1000 → All
500 → NC-17 (18+)
400 → R (16+)
300 → PG-13 (12+)
200 → PG (6+)
100 → G (from 0)
0 → None

The US Parental Guide rating is comparable to the German FSK rating
TV-Serien-Ranking-Nummer 1000Link= The value entered describes the maximum permitted level of TV content relevant to youth protection on the device.
Possible values based on US valuation levels:
1000 → All
600 → TV-MA (18+)
500 → TV-14 (14+)
400 → TV-PG (not for "younger" children)
300 → TV-G (from 0)
200 → TV-Y7 (produced for children from 7)
100 → TV-Y (produced for children from 0)
0 → None

The US Parental Guide rating is comparable to the German FSK rating
Regionscode Germany Two-character code for the region used to specify ratings
Accept cookies in Safari Never Cookies akzeptieren:
Does not accept cookies
From current website only (iOS 8) or visited sites (pre-iOS 8) Depending on iOS version:
from iOS 8: Only from current website
from iOS 8: Only from visited pages
From websites I visited Accepts cookies from all visited websites
Always Accepts all cookies
JavaScript erlauben Default:    Allows JavaScript in Safari
Allow Pop-ups Default:    Allows Pop-ups in Safari
Enable fraud warning Default:    Enables fraud warning in Safari
Force translation on the device only '    When this option is enabled, the device does not connect to Siri servers for translation purposes
Allow unmanaged documents in managed apps Default:    Allows managed apps to access unmanaged documents
Allow managed documents in unmanaged apps Default:    Allows unmanaged apps to access managed documents
Managed clipboard required '    When enabled, the copy and paste feature follows the "Allow open from managed to unmanaged" and "Allow open from unmanaged to managed" constraints.
Treat AirDrop as unmanaged destination Default:   
  • When activated, protected (managed) data is prevented from leaving the device unauthorized by Airdrop.
    • Handoff erlauben Default:    If this value is set to "false", handoff is deactivated. Handoff allows you to continue an activity started on an iOS-device on another device.
    Allow Touch ID/Face ID for unlocking Default:    Allows Touch ID/Face ID to unlock device
    Fingerprint timeout '     The time after which unlocking the fingerprint requires a password for authentication.
    Possible values: 1, 6, 12 hours, 1, 2, 3 days or 1 week
    Allow modifying notification settings Default:    Allows modifying notification settings
    Allow incoming AirPlay requests Default:    Allows incoming AirPlay requests
    Allow pairing with Remote app Default:    Allows pairing with Remote app
    Diktat erlauben Default:    Allows dictation
    Allow camera use Default:    Allows the user to use the camera
    Siri erlauben Default:    Erlaubt Siri.
    Allow Siri while locked Default:    Allows Siri while device is locked
    Allow Siri user generated content Default:    When inactive, it prevents Siri from querying requests with user-generated content
    Allow modifying Touch ID/Face ID Default:    The user is allowed to change the Touch ID/Face ID
    Allow diagnostic submission Default:    Send diagnostic and usage stats to Apple
    Allow modifying diagnostics settings Default:    The user is allowed to change the diagnostic settings
    Retrieved from "https://wiki.securepoint.de/index.php?title=MS/deployment/profile/einschraenkungen&oldid=92463"