Chapter 10 Appendices 78
•
Allow Notication Center access from Lock Screen: When this option is o, users can’t swipe
down to see Notication Center in the Lock screen.
•
Allow Today view from Lock Screen: When this option is o, users can’t swipe down to see
Today View in the Lock screen.
•
Allow Passbook notications in Lock Screen: When this option is o, users must unlock the
device to use Passbook.
•
Require iTunes password for all purchases: When this option is o, iTunes in-app purchases and
iTunes purchases don’t prompt for the account password.
•
Set allowed content ratings: Sets the region and ratings for movies, TV shows, and apps.
Mac functionality
The following are Mac functionality restrictions:
•
Allow App Store adoption: When this option is o, iLife and iWork apps that shipped with OS X
can’t be adopted by the App Store.
•
Restrict App Store to software updates only: When this option is on, the App Store can only be
used to update apps. The default is O.
•
Require admin password to install or update apps: When this option is on, an administrator
password is required in order to update any apps. The default is O.
•
Restrict which apps are allowed to launch: When this option is on, you can restrict which apps
can be used. The default is O.
•
Restrict specic System Preferences panes: When this option is on, you can select which items in
System Preferences users can access. If a pane isn’t listed, make sure it’s installed on the Mac
with Prole Manager installed. The default is O.
•
Lock the Desktop picture: When this option is on, you can prevent the user from changing the
Desktop picture. The default is O.
Supervised settings
The two Activation Lock restrictions are o by default for all users and user groups.
•
Send “Allow Activation Lock” command after MDM enrollment: When this option is on users are
allowed to congure their iOS device so it can’t be erased without entering the user’s Apple ID.
The following setting is a subset of the above.
•
Only send command if Activation Lock bypass code has been obtained: When this option is on,
the MDM server must receive an Activation Lock bypass code before the user can congure
their iOS device so it can’t be erased without entering the user’s Apple ID.
•
Global network proxy for HTTP: When this payload is added to a prole, iOS devices must use
the proxy dened in the payload for all network trac using HTTP.
•
Allow iMessage: When this option is o for Wi-Fi-only devices, the Messages app is hidden.
When this option is o for device with Wi-Fi and cellular, the Messages app is still available,
but only the SMS/MMS service can be used.
•
Allow Game Center: When this option is o, the Game Center app and its icon are removed.
•
Allow removal of apps: When this option is o, users can’t remove installed apps.
•
Allow iBooks Store: When this option is o, users can’t purchase books through the
iBooks Store.
•
Allow Podcasts: When this option is o, users can’t download Podcasts.
•
Allow predictive keyboard: When this option is o, users won’t see the predictive keyboard.
•
Allow auto correction: When this option is o, users won’t see any word correction suggestions.
100% resize factor