Restrictions

Introduction #

The following is an overview of the available iOS/iPadOS restrictions in Relution 5.28.3. Please note the additional information at the individual configuration points in Relution, such as supervised , User Enreollment, deprecated, deprecated on non-supervised Devices, as well as the min. OS version such as iOS 16+

Device #

• Allow in-app purchases

  If disabled, in-app purchases cannot be used

• Force App Store password for all purchases

  If enabled, the iTunes password must be entered for each transaction.

• Allow trusting of enterprise apps

  If disabled, the ‘Trust Enterprise Developer’ button under ‘Settings -> General -> Profile & Device Management’ will disappear; this protects apps from being deployed by Universal Provisioning Profiles. This restriction applies to free developer accounts, but not to enterprise app developers who are trusted because their apps have been pushed via MDM. Likewise, revocation of a previously granted trust is not possible.

• Allow apps to use cellular data

  When disabled, apps are not allowed to use cellular data.

• Allow Spotlight web searches

  When disabled, Spotlight no longer displays Internet search results.

• Allow installation of apps

  If disabled, the App Store cannot be used and the icon is removed from the home screen. The user is not able to install or update applications.

• Allow uninstalling apps

  If disabled, apps cannot be uninstalled on the iOS device.

• Allow spelling correction

  If disabled, words will not be corrected when entering text.

• Allow predictive text input

  If disabled, words will not be automatically completed when entering text.

• Allow autocorrect

  If disabled, autocorrect is not available when entering text.

• Allow App Store

  If the App Store is blocked, the icon is removed from the home screen. Users can still install and update apps via iTunes or the Configurator.

• Allow automatic app downloads

  Automatic downloads of apps purchased on other devices. Does not affect updates to existing apps.

• Allow dictation

  If disabled, dictation is not available.

• Allow removal of system apps

  If disabled, removal of system apps is not allowed.

• Enforce authentication before autofill

  If disabled, the user does not have to authenticate before passwords or credit card information are automatically filled in Safari or other apps. When this restriction is disabled, the user can toggle this feature in Settings. Only supported on devices with Face ID or Touch ID.

• Allow autofill passwords

  When this setting is disabled, users cannot use the Autofill Passwords feature and will not be prompted to use a stored password in Safari and other apps. In addition, strong passwords are automatically disabled and not suggested to users.

• Allow Touch ID or Face ID changes

  When this option is disabled, the system prevents the user from changing Touch ID or Face ID.

• Allow App Clips

  If disabled, all existing app clips on the device will be removed.

• Allow ‘Find My Device’

  If disabled, the ‘Find My Device’ option in the ‘Find My’ app will not be available

• Allow changes to ‘Find My Friends’

• Allow ‘Find My Friends’

  If disabled, the ‘Find My Friends’ option will not be available in the ‘Where is?’ app

• Allow installation of alternative app marketplaces

  If disabled, the system will prevent the installation of alternative app marketplaces from the internet and prevent installed alternative app marketplaces from installing apps.

• Allow installation of apps directly from the web

Apps #

Safari #

• Allow Safari

  If disabled, the Safari app is not available and the icon is hidden from the home screen. In addition, web links on the home screen or from other apps can no longer be opened.

  • Allow Auto-Complete

    Disables auto-complete in the Safari browser.

  • Force Fraud Warnings

    When enabled, the display of fraud warnings in Safari is enforced.

  • Allow JavaScript

    When disabled, Safari will not execute JavaScript.

  • Allow pop-ups

    When disabled, pop-ups cannot be displayed in Safari.

  • Allow cookies
    • Always
    • Only from sites visited
    • Never

SIRI #

• Allow Siri

  If disabled, Siri is not available.

  • Allow Siri when device is locked

    If disabled, the user cannot use Siri while the device is locked. This function is ignored if the device has not set a password.

  • Use Siri word filter

    If activated, the use of the Siri word filter is enforced.

  • Allow Siri to query user content on the web

    If disabled, Siri is not allowed to query user content on the web.

Other Apps #

• Protect Mail Activity

  When enabled, the IP address is hidden and remote content is loaded securely in the background, even if an email is not opened. This makes it more difficult for senders to track email activity.

• Allow Messages App

  When disabled, use of the Messages app is disabled.

• Allow Music Service

  If disabled, Apple Music cannot be used and the Music app is reset to classic mode.

• Allow iTunes Store

  If disabled, the iTunes Music Store is not available and the icon is hidden from the Home screen. In addition, content previews cannot be accessed, purchased or downloaded.

• Allow Mail Summary

  Allow manual creation of e-mail messages. This does not affect the automatic generation of summaries.

Managed apps and documents #

Restrictions for managed apps and documents #

• Allow opening managed documents in unmanaged apps

  If disabled, documents from managed apps and accounts cannot be opened in unmanaged apps and accounts. Starting with iOS 11.3, contacts are also included.

  • Allow unmanaged apps to access managed contacts

    When activated, non-managed apps are allowed to read managed contacts. If “Allow opening managed documents in non-managed apps” is activated, this restriction has no effect.

  • Allow managed apps to write non-managed contacts

    If enabled, managed apps are allowed to create unmanaged contacts. If “Allow opening managed documents in unmanaged apps” is enabled, this restriction has no effect.

• Allow opening unmanaged documents in managed apps

  If disabled, documents from unmanaged apps and accounts cannot be opened in managed apps and accounts.

• Apply “Open from…” settings to copy and paste

  When enabled, the “Allow opening of managed documents in unmanaged apps” and “Allow opening of unmanaged documents in managed apps” restrictions can be used to control whether information copied from managed applications can be pasted into unmanaged applications and/or vice versa.

• Allow managed apps to sync with iCloud

  When disabled, managed apps are prevented from using iCloud synchronization.

• Always consider Airdrop destinations as unmanaged

  When enabled, all Airdrop destinations are always considered unmanaged.

Settings #

Restrictions of settings #

• Allow sending diagnostic and usage data to Apple

  When disabled, the device is prevented from automatically sending diagnostic and usage data to Apple.

• Allow personalized advertising from Apple

  Allow personalized advertising from Apple

• Allow over-the-air PKI updates

  CRL and OCSP checks are not disabled

• Allow users to accept untrusted TLS certificates.

  If disabled, untrusted HTTPS certificates are automatically rejected without first asking the user.

• Allow screenshots and screen recordings

  If disabled, screenshots or screen recordings cannot be made. In addition, screen transmission is not available in the Classroom app.

• Remotely monitor the screen with the Classroom app
• Allow user to install configuration profiles

  If disabled, configuration profiles and certificates cannot be installed.

• Allow setting restrictions and screen time

  When disabled, the ‘Allow Restrictions’ option in Settings is not available. Also, on iOS 12 or later, turning on Screen > Time is not available and if it is already active, it is disabled.

• Allow ‘Erase All Content and Settings’

  When disabled, the ‘Erase All Content and Settings’ option in the Reset menu is hidden.

• Allow AirPrint credentials storage

  If disabled, the username and password for AirPrint will not be stored.

• Require trusted TLS certificate for AirPrint

  Only allow printer communication with a trusted TLS certificate.

• Enforce automatic date and time settings

  When this setting is enabled, the date and time settings are set to “automatic” and cannot be changed by the user. Note: The device’s time zone can only be updated if the device can determine its location (requires a cellular or Wi-Fi connection with location settings).

• Prohibit turning off Wi-Fi

  Prevents the Wi-Fi from being switched off, even in flight mode. Switching between Wi-Fi networks is still allowed.

• Allow QuickPath keyboard

  Allows writing using swipe gestures (QuickPath).

• Allow call recording

  Enables call recording.

• Allow RCS messaging

  Enables the use of RCS messaging.

• Allow External Intelligence Integrations

  Enables the use of external, cloud-based information services with Siri

• Allow Signing In to External Intelligence Integrations

  Disabling this flag puts external information providers in anonymous mode. If a user is already signed in to an external information provider, applying this restriction will sign them out.

Classroom #

Classroom Restrictions #

• Allow teacher to lock apps and devices without confirmation via Apple Classroom

  Allows the teacher to lock devices or an app open on the device without requesting confirmation via Apple Classroom.

• Enforce automatic class participation

  When enabled, students will not be prompted to join a class.

• Require permission to exit Classroom course

  When enabled, leaving an unmanaged class requires the teacher’s permission.

Media #

Restrictions for the media #

• Allow camera

  If disabled, the camera icon is removed from the home screen and it is no longer possible to take photos or videos in any app.

• Allow Photo Stream

  If disabled, Photo Stream cannot be used.

• Allow sharing of Photo Streams with other users

  If disabled, the Shared Photo Stream cannot be used.

• Allow downloads of media marked as erotic content

  If disabled, the user cannot download books marked as erotic reading from the iBooks Store.

• Force all devices receiving Airplay requests from this device to use a pairing password When enabled, all devices sending AirPlay requests to this device will be forced to use a pairing password.
• Allow use of Game Center

  When disabled, Game Center cannot be used.

  • Allow multiplayer games
  • Allow adding friends to Game Center
• Allow iBookstore

  If disabled, the iBooks Store cannot be used.

• Allow Podcasts

  If disabled, the Apple Podcasts app cannot be used.

• Allow News

  If disabled, the News widget and Apple News will not be displayed.

• Allow Apple Music Radio

  If disabled, Apple Music Radio cannot be used.

• Allow Facetime Video Conferencing

  If disabled, Facetime video conferencing cannot be used.

• Do not allow explicit music, podcasts & iTunes U

  If disabled, explicit music or video content purchased from the iTunes Store will not be displayed. Explicit content is marked as such by the content providers, such as music publishers, when sold through the iTunes Store.

Changes #

Restrictions on changes #

• Allow account modifications

  If disabled, account modifications are not possible in the settings.

• Allow password changes

  If disabled, the device password cannot be added, changed or deleted. This restriction is ignored by Shared iPads.

• Allow changes to the device name

  If disabled, the device name cannot be changed.

• Allow changes to wallpaper

  If disabled, the wallpaper cannot be changed.

• Allow changes to notification settings

  If disabled, it is not possible to change the notification settings.

• Allow changing an app’s diagnostic data transmission

  If disabled, the settings for sending diagnostic data cannot be changed.

• Allow changes to Bluetooth settings

  If disabled, it is not possible to change the Bluetooth settings.

• Enforce Wi-Fi whitelisting

  The devices can only join Wi-Fi networks that are defined as a Wi-Fi configuration in the policy.

• Allow creation of VPN configurations

  If disabled, it is not possible to create VPN configurations.

• Allow changes to mobile tariff settings

  If enabled, users can change settings related to the mobile tariff.

• Allow changes to personal hotspot

  Allow changes to personal hotspot settings.

iCloud #

iCloud Restrictions #

• Allow iCloud Backup

  If disabled, iCloud backups of the device are not possible.

• Allow iCloud Keychain Synchronization

  If disabled, iCloud Keychain synchronization cannot be used.

• Allow iCloud Photo Library

  If disabled, iCloud Photo Library is not available. Photos that have not yet been fully downloaded will be deleted from local storage.

• Allow iCloud Documents and Data Synchronization

  If disabled, iCloud Documents and Data Synchronization is not possible.

• Allow iCloud Private Relay

Lock screen #

Lockscreen restrictions #

• Allow Control Center access when device is locked

  If disabled, Control Center will be prevented from appearing on the lockscreen.

• Allow notifications in Notification Center when device is locked

  If disabled, notifications will not appear on the lock screen and you will not be able to open Notification Center while your device is locked.

• Allow Day View in Notification Center when your device is locked

  If disabled, Day View is not available in Notification Center while your device is locked.

• Show Passbook notification when device is locked

  If disabled, Passbook notifications do not appear on the lock screen.

Data backup and synchronization #

Restrictions for backups and synchronization #

• Force encryption of backups

  Forces encryption to be switched on for backups.

• Do not back up Enterprise Books

  If disabled, Enterprise Books are not backed up.

• Do not synchronize Enterprise Books, Notes and Highlights

  If disabled, Enterprise Books, Notes and Highlights will not be synchronized.

• Allow automatic synchronization in roaming mode

  If disabled, background data retrieval in roaming mode is disabled.

• Allow transfer of an eSIM to another device

• Keep eSIM when erasing

Restrictions for AI features #

General #

• Allow Genmoji creation

• Allow image generation

• Allow Apple Intelligence writing tools

• Allow use of Image Wand

• Allow live voicemail

• Allow generation of text in the user’s handwriting