ios 9 iphones

iOS 9: New MDM Configuration Profiles

iOS 9 has dropped and with it are some new restrictions we can apply using your favourite MDM tools. Below is a table summarising them. As you can see most of them require the device to be supervised, so no excuses not to then.

Check with your MDM provider to find out when they will start supporting these new payloads. Certainly Apple’s Configurator 2 and Server 5 will support them.

KeyTypeSupervision?Description
allowMailDrop Boolean NoIf true, this account is allowed to use Mail Drop. The default is false.
allowNews Boolean Yes If set to false, disables News. Defaults to true.
forceAirDropUnmanaged Boolean No If set to true, causes AirDrop to be considered an unmanaged drop target. Defaults to false.
allowUIAppInstallation Boolean Yes When false, the App Store is disabled and its icon is removed from the Home screen. However, users may continue to use Host apps (iTunes, Configurator) to install or update their apps. Defaults to true.
allowScreenShot Boolean No If set to false, users can’t save a screenshot of the display and are prevented from capturing a screen recording as well. Defaults to true.
allowKeyboardShortcuts Boolean Yes If set to false, keyboard shortcuts cannot be used. Defaults to true.
allowPairedWatch Boolean Yes If set to false, disables pairing with an Apple Watch. Any currently paired Apple Watch is unpaired and erased. Defaults to true.
allowPasscodeModification Boolean YesIf set to false, prevents device passcode from being added, changed, or removed. Defaults to true
allowDeviceNameModification Boolean Yes If set to false, prevents device name from being changed. Defaults to true.
allowWallpaperModification Boolean YesIf set to false, prevents wallpaper from being changed. Defaults to true.
allowAutomaticAppDownloads Boolean Yes If set to false, prevents automatic downloading of apps purchased on other devices. Does not affect updates to existing apps. Defaults to true.
allowEnterpriseAppTrust Boolean NoIf set to false, prevents trusting enterprise apps. Defaults to true.
allowEnterpriseAppTrustModification Boolean Yes If set to false, prevents the enterprise app trust settings from being changed. Defaults to true
allowMusicService Boolean Yes If set to false, Music service is disabled and the Music app reverts to classic mode. Defaults to true.
allowCloudPhotoLibrary Boolean No If set to false, disables iCloud Photo Library. Any photos not fully downloaded from iCloud Photo Library to the device will be removed from local storage.

Leave a Reply

Your email address will not be published. Required fields are marked *