Q; App installation by device operation is restricted. Is there a way to add apps only to specific devices?
There are two ways to add apps to specific devices.
23 docs tagged with "Feature Restrictions"
View All TagsQ; App installation is currently not allowed on devices. How can I allow it?
Installing apps on a device requires signing in with an Apple ID, so allow the following items in the Restrictions payload of the profile.
Q; Can a Web Clip open a specified URL in a browser app other than Safari?
You can open the URL in a specified browser app by setting the identifier of the target third-party browser app in the Third-party browser app setting of the Web Clip payload.
Q; Can data sharing between apps with a briefcase icon and regular apps be prohibited on Work Profile devices?
By default, data files cannot be shared between the Work Profile (apps with a briefcase icon) and the user profile (regular apps).
Q; Can I allow Wi-Fi connections only to permitted access points?
Yes, you can.
Q; Can I erase an iPhone/iPad that does not allow pairing with a host PC by connecting it to a computer?
If Allow pairing with non-Configurator hosts is set to OFF in the profile, you cannot erase the device even if you connect it to a computer.
Q; Can I hide widgets on iOS/iPadOS?
If you use Home Screen Layout, widgets are no longer displayed on the Home Screen.
Q; Can I prohibit Windows Update?
Back to FAQ top
Q; Can I set the Lock Screen and Home Screen wallpaper?
You can set it on supervised devices.
Q; Can I specify the layout of applications on the device Home Screen?
Yes, you can.
Q; Can I use Remote Control while an Android device is in Single App Mode?
Yes, you can.
Q; Can MDM also manage apps that device users installed themselves?
Yes, by enabling Auto Management.
Q; Cannot clear Safari history
If Clear History and Website Data under Settings → Apps → Safari on the device (Settings → Safari on iOS 17 and earlier) is grayed out and cannot be selected, check the following two points.
Q; Cannot use Safari Private Browsing
Safari Private Browsing is a feature that lets you browse websites without leaving browsed pages, search history, or AutoFill information on the device. It is equivalent to an "Incognito window" in Google Chrome and similar browsers.
Q; Device users can delete the MDM agent app (BizAgent). Is it possible to prohibit deletion?
If you use Device Owner mode, device users can no longer delete the MDM profile.
Q; How can I allow browsing of only specific sites?
iOS / iPadOS
Q; How can I prevent users from withdrawing devices from the unit through device operations?
The following table lists the device operations that can withdraw a device from the unit and how to prevent them.
Q; I want to change the `Find My` setting on an iPhone from the MDM
Can I change the Find My → Find My iPhone → Send Last Location setting on an iPhone from the MDM?
Q; I want to prohibit saving data to iCloud
If users do not sign in with an Apple ID, data cannot be saved to iCloud either.
Q; I want to prohibit signing in with an Apple Account
Set Allow account modification (supervised only, iOS 7.0+) in the Restrictions payload of the profile to Off to prohibit changes to account settings on the device.
Q; I want to set the auto-lock time for the screen
You can enforce the use of auto-lock by setting Maximum Auto-Lock in the Passcode payload of the profile.
Q; What is a suitable way to manage business apps on company-owned devices? We have many company-owned devices, and managing Apple IDs in bulk is difficult.
By using the per-device VPP license method, you can install App Store apps without an Apple ID.
Q; What is a suitable way to manage business apps on personally owned devices? I do not want business apps installed with personal Apple IDs.
Even in a BYOD environment, by using the per-device VPP license method, you can install App Store apps without an Apple ID.