Profile configuration in the Restrictions tab
Last adaptation to the version: 2.15 (03.2026)
New:
notempty
This article refers to a Beta version
Partial configuration for profiles in the Mobile Security Portal.
Further information is displayed here:
- MS/deployment/profile (inclusion) (← liens)
- MS/deployment/profile/reiter-einschraenkungen (inclusion) (← liens)
- MS/deployment/profile-AppleTV (inclusion) (← liens)
- MS/deployment/profile-shared-iPad (inclusion) (← liens)
- MS/deployment/profile-Device (inclusion) (← liens)
- MS/deployment/profile-User (inclusion) (← liens)
| Caption | Value | Description |
|---|---|---|
|
| ||
| Allow automatic unlocking | When deactivated , the automatic unlocking is disabled | |
| When deactivated , today's lock screen view will be disabled | ||
| Force encrypted backups | When activated , encrypted backups are enforced | |
| When activated , ad tracking will be restricted | ||
| Allow trusting enterprise apps | When deactivated , Enterprise apps are not trusted | |
| When deactivated , wallet notifications will not be shown on the lock screen | ||
| When activated , Apple's Mail Privacy Protection (AMPP) is activated | ||
| When deactivated , Touch ID/Face ID is not allowed to unlock the device | ||
| When deactivated , the user is not permitted to change the Touch ID/Face ID | ||
| When deactivated , diagnostic and usage data is not sent to Apple | ||
| When deactivated , the user is not permitted to change the diagnostic settings | ||
|
| ||
| Allow network access for files | When deactivated , the connection to network drives is prevented in the file app | |
| When deactivated , changes to the Bluetooth settings are not permitted | ||
| When deactivated , the mobile data uses for app settings cannot be changed | ||
| When deactivated , the user is not allowed to accept untrusted certificates in TLS | ||
| When deactivated , handoff is deactivated. Handoff allows you to continue an activity started on an iOS-device on another device. | ||
|
| ||
| When deactivated , the use of the iCloud Photo Library on the device is not permitted | ||
| When deactivated , the backup with the iCloud is not permitted | ||
| When deactivated , automatic synchronisation is deactivated during roaming | ||
| When deactivated , Enterprise books are not saved | ||
| When deactivated , Enterprise books and highlights are not synchronised | ||
|
| ||
| When deactivated no in-app purchases can be made | ||
| When deactivated , multiplayer gaming is not allowed | ||
| When activated , the user's iTunes password is required for all purchases | ||
|
| ||
| When deactivated , Siri is not allowed | ||
| When deactivated , Siri is not allowed while the device is locked | ||
| When deactivated , it prevents Siri from querying requests with user-generated content | ||
| When deactivated , dictations are not allowed | ||
| When deactivated , the QuickPath keyboard is disabled | ||
| Force translation on the device only | When activated , the device does not connect to Siri servers for translation purposes | |
| Allow QuickPath keyboard | When deactivated , the QuickPath keyboard is disabled | |
|
| ||
| When deactivated , Apple Music will be disabled in the Music app | ||
| When deactivated , iTunes Radio will be disabled in the Music app | ||
| When deactivated no news can be used | ||
|
hide Klicken für dauerhafte Anzeige 17+ 12+ 9+ 4+
| ||
|
hide Klicken für dauerhafte Anzeige FSK 18 FSK 16 FSK 12 FSK 6 FSK 0
| ||
|
hide Klicken für dauerhafte Anzeige | ||
|
| ||
|
hide Klicken für dauerhafte Anzeige Never Always
| ||
| When deactivated , JavaScript is not allowed in Safari | ||
| When deactivated , pop-ups are not allowed in Safari | ||
| Enable fraud warning | When activated , the fraud warning in Safari is activated | |
|
| ||
| Allow OTAPKI updates | When deactivated , OTAPKI updates are disabled | |
| When deactivated , the temporary session of the shared device is disabled | ||
| When activated , all devices receiving AirPlay requests from this device will be forced to use a pairing password | ||
| When deactivated , the device name cannot be changed | ||
| Allow voice dialing while device is locked | When deactivated , no voice dialling is allowed, even if the device is locked | |
| Force Apple Watch wrist detection | When activated , Apple Watch wrist detection is enforced | |
| Allow pairing with Apple Watch | When deactivated , pairing with Apple Watch is not permitted | |
| When deactivated , search results from the web will not be shown in Spotlight | ||
| When deactivated , restricts Apple's personalized advertising. Available in iOS 14 and later | ||
| When deactivated , the user is not allowed to use the camera | ||
|
| ||
| When deactivated , writing unmanaged contacts will be disabled | ||
| When deactivated , unmanaged apps cannot access contacts of managed accounts and that managed apps do not save contacts in the local Contacts app | ||
| When deactivated , iCloud synchronisation is deactivated for managed apps | ||
| When deactivated , iCloud synchronisation is deactivated for managed apps | ||
| When deactivated , iCloud synchronisation is deactivated for managed apps | ||
| When activated , the copy and paste feature follows the "Allow open from managed to unmanaged" and "Allow open from unmanaged to managed" constraints. | ||
| Treat AirDrop as unmanaged destination | When activated , it prevents protected (managed) data from leaving the device without authorisation via Airdrop | |