Jamf Now supports a number of restrictions for iOS and macOS devices that can help you keep your data secure and your users on task.
Some restrictions require supervising the device. Restrictions that require supervision will be indicated with a 
icon. To learn more about supervising devices, check out our article on supervision.
icon. To learn more about supervising devices, check out our article on supervision.| RESTRICTION | NOTES | ||
| Apps | |||
| iOS | macOS | ||
| Disable Installing Apps (all methods, including Jamf Now | Users cannot install or update iOS apps using any method, including Jamf Now. The App Store app is disabled and its icon is removed from the Home screen. Supervision required. |
✓ |
|
Disable Installing Apps (on device) |
Users cannot install or update iOS apps except using Apple Configurator, iTunes, and Jamf Now. The App Store app is disabled and its icon is removed from the Home screen. Supervision required. |
✓ |
|
Disable Deleting Apps |
Disables the ability to remove apps from iOS devices. Supervision required. |
✓ |
|
Disable Deleting System Apps |
Disables the ability to remove default system apps (Safari, Calendar, Mail, etc.) from iOS devices. Supervision required. |
✓ |
|
Disable Camera |
Disables the Camera iOS app and removes its icon from the Home screen. This also disables all other camera functionality in all iOS and macOS apps. Users are unable to take photos or video. | ✓ | ✓ |
Disable FaceTime |
Disables the FaceTime iOS app and removes its icon from the Home screen. Supervision required. |
✓ |
|
| Disable Safari | Disables the Safari iOS app and removes its icon from the Home screen. This also prevents users from opening web clips that are not in full screen mode. Supervision required. |
✓ |
|
| Disable Safari JavaScript | Disables executing JavaScript within Safari. This will make many web sites unusable. | ✓ | ✓ |
| Disable Safari Popups | Disables showing pop-up tabs within Safari. | ✓ | ✓ |
Disable Safari Auto-Fill |
Disables auto-fill of usernames, passwords, addresses, etc. within Safari. | ✓ | ✓ |
| Block All Cookies in Safari | Blocks all cookies in Safari on iOS devices. | ✓ | |
| Prevent Cross-Site Tracking in Safari | Prevents Cross-Site Tracking (third-party cookies) in Safari on iOS devices. | ✓ | |
| Disable Messages | Disables the Messages iOS app and removes its icon from the Home screen. Supervision required. |
✓ |
|
| Disable Podcasts | Disables the Podcasts iOS app and removes its icon from the Home screen. Supervision required. |
✓ |
|
| Disable News | Disables the News iOS app and removes its icon from the Home screen. Supervision required. |
✓ |
|
| Disable iBooks Store | Disables the iBooks Store within the iBooks iOS app. Users cannot preview, purchase, or download iBooks. Supervision required. |
✓ |
|
Disable iTunes Store |
The iTunes Store iOS app is disabled and its icon is removed from the Home screen. Users cannot preview, purchase, or download content. Supervision required. |
✓ |
|
| Disable Explicit Content in iTunes Store | Prevents purchasing or previewing explicit content in iTunes Store on iOS devices. Supervision required. |
✓ |
|
| Disable Apple Music | Disables the Apple Music streaming service on iOS and macOS devices. Supervision required. |
✓ |
✓ |
| Disable Apple Music Radio | Disables the Apple Music Radio service on iOS devices. Supervision required. |
✓ |
|
| Disable In-App Purchases | Prevents In-App purchasing in apps on iOS devices. | ✓ | |
Disable Automatic App Downloads |
Disables automatic iOS app downloads for apps purchased on another device with the same iCloud account. Supervision required. |
✓ |
|
| Disable Game Center | Disables the Game Center iOS app and removes its icon from the Home screen. Supervision required. |
✓ |
|
| Security & Privacy | |||
| iOS | macOS | ||
|
Managed App Data Segregation |
Documents in managed apps and email accounts (deployed by Jamf Now) only open in other managed apps and email accounts on iOS devices. | ✓ | |
| Unmanaged App Data Segregation | Documents in unmanaged apps and email accounts will only open in other unmanaged apps and email accounts on iOS devices. | ✓ | |
| Treat AirDrop as an Unmanaged Destination | Airdrop will be treated as an unmanaged destination on iOS devices. | ✓ | |
| Disable Screenshots | Prevent users from taking screenshots or screen recordings on an iOS device. | ✓ | |
| Disable Connecting with Computers | An iOS device supervised with Configurator can only connect with the Mac that supervised it. DEP devices cannot pair with any computer. Supervision required. |
✓ |
|
| Disable “Enable Restrictions” | Disables the “Enable Restrictions” option in the iOS Settings app. Supervision required. |
✓ |
|
| Disable “Erase All Content and Settings” | Disables the “Erase All Content and Settings” option in the iOS Settings app. Supervision required. |
✓ |
|
| Disable Touch ID for unlock | Prevents Touch ID from being used to unlock an iOS or macOS device. | ✓ | ✓ |
| Disable Apple Watch for unlock | Prevents Apple Watch from being used to unlock a macOS device. | ✓ | |
Disable Apple Watch Pairing |
Disables pairing an Apple Watch with an iOS device. Warning: also unpairs and erases any currently paired Apple Watch. Supervision required. |
✓ |
|
| Require Wrist Detection on Apple Watch | Require any paired Apple Watch to use wrist detection to lock when removed on iOS devices. | ✓ | |
| Prevent Manually Installing Configuration Profiles and Certificates | Prevents installing a configuration profile or certificate manually, such as via a web browser or AirDrop, on iOS devices. Supervision required. |
✓ |
|
| Reject Untrusted HTTPS Certificates | Automatically reject untrusted HTTPS certificates on iOS devices without prompting the user. | ✓ | |
| Force Encrypted Backups | Requires that all backups of an iOS device be encrypted. | ✓ | |
| Prevent Changes to Device Name | Prevents changing the name of an iOS device. Supervision required. |
✓ |
|
| Prevent Changes to Passcode | Prevents adding, removing, or changing the passcode on an iOS device. Supervision required. |
✓ |
|
| Prevent Changes to Bluetooth | Prevents changing Bluetooth settings on iOS devices. Supervision required. |
✓ |
|
| Hide Apple Wallet from the Lock screen | Disables Apple Wallet notifications from displaying when iOS devices are locked. | ✓ | |
| Disable internet search results from Spotlight searches | Disables internet search results from displaying in Spotlight searches. Supervision required. |
✓ |
✓ |
| Disable diagnostic reports | Disables iOS devices from automatically sending diagnostic reports to Apple. | ✓ | |
| Prevent changes to notifications | Prevents changing notification settings on iOS devices. Supervision required. |
✓ |
|
| Hide notifications on Lock screen | Disables notifications from displaying when iOS devices are locked. | ✓ | |
| Hide Control Center on Lock screen | Disables the Control Center from displaying when iOS devices are locked. | ✓ | |
| Hide Today View on Lock screen | Disables the Today view in the notification center when iOS devices are locked. | ✓ | |
| Disable voice dialing when locked | Disables voice dialing when iOS devices are locked. | ✓ | |
| Limit ad tracking | Limits ad tracking with Apple’s ad platform on iOS devices. | ✓ | |
| Prevent changes to Find My Friends | Prevents changing the Find My Friends settings on iOS devices. Supervision required. |
✓ |
|
|
|
|||
| Network & Cellular | |||
| iOS | macOS | ||
| Disable AirDrop | Disables AirDrop file sharing on iOS devices. Supervision required. |
✓ |
|
| Disable AirPrint | Disables AirPrint printing on iOS and macOS devices. Supervision required. |
✓ |
✓ |
| Wi-Fi Whitelisting | Only allow iOS devices to connect to Wi-Fi networks configured by Jamf Now. Supervision required. |
✓ |
|
| Disable App Cellular Data Settings | Prevents changing the cellular data access settings for apps on iOS devices. Supervision required. |
✓ |
|
| Disable background data usage when roaming | Disables background fetch activity for email, apps, etc. when roaming on iOS devices. | ✓ | |
| Disable VPN configuration | Prevents configuring a VPN connection on iOS devices. | ✓ | |
| iCloud | |||
| iOS | macOS | ||
Disable iCloud Backup |
Disables device backups to iCloud on iOS devices. | ✓ | |
| Disable iCloud Keychain | Disables syncing the Keychain to iCloud on iOS and macOS devices. | ✓ | ✓ |
| Disable iCloud Documents Sync | Disables syncing document and app data to iCloud on iOS and macOS devices. Supervision required. |
✓ |
✓ |
| Disable iCloud Desktop & Documents | Disables syncing the Desktop and Documents folders to iCloud on macOS devices. | ✓ | |
| Disable iCloud bookmarks | Disables Safari bookmarks syncing to iCloud on macOS devices. | ✓ | |
| Disable iCloud email | Disables the iCloud Email service on macOS devices. | ✓ | |
| Disable iCloud calendar | Disables the iCloud Calendar service on macOS devices. | ✓ | |
| Disable iCloud Reminders | Disables the iCloud Reminders service on macOS. | ✓ | |
| Disable iCloud Address Book | Disables the iCloud Address Book service on macOS devices. | ✓ | |
| Disable iCloud Notes | Disables the iCloud Notes service on macOS devices. | ✓ | |
| Disable iCloud Photo Library | Disables the iCloud Photo Library service on iOS and macOS devices. | ✓ | ✓ |
| Disable iCloud Photo Stream | Disables the iCloud Photo Stream service on iOS devices. | ✓ | |
| Disable iCloud Shared Photo Stream | Disables the iCloud Shared Photo Stream service on iOS devices. | ✓ | |
| Siri | |||
| iOS | macOS | ||
| Disable Siri | Disables the use of Siri on iOS and macOS devices. If the restriction is turned off, Siri will remain off until users turn it back on. | ✓ | ✓ |
| Disable Siri when locked | Disables Siri on iOS devices when locked with a passcode. This is ignored if the device does not have a passcode. | ✓ | ✓ |
| Disable User-Generated Content in Siri | Disables user-generated content (like Wikipedia.org) from Siri responses on iOS devices. | ✓ | |
| Force profanity filter in Siri | Filters profanity from Siri responses on iOS devices. Supervision required. |
✓ |
|
| iOS | macOS | ||
| Prevent changes to accounts | Prevents adding, removing, or modifying accounts (email, calendar, etc.) on iOS devices. Supervision required. |
✓ |
|
| Wallpaper | |||
| iOS | macOS | ||
| Prevent changes to wallpaper | Prevents the wallpaper from being changed on iOS and macOS devices. Supervision required. |
✓ |
✓ |