iOS
All devices must be assigned to a group and are subject to the settings of the group to which they are assigned. You can create multiple groups for each device type (for example, iPads or iPhones) and configure settings for each device type.
Devices can only be assigned to one group and must be of the same device type, although they can be transferred between groups at any time.
Creating Groups for iOS Devices
To create groups for iOS devices, click Add Group, define a Group Name and configure the settings as required.
Configuration
Wireless Network – click Add Wireless Network and select the wireless network from the list, or create a new wireless network (if no wireless network has been pre-defined). To create wireless networks, see Wireless Network configurations for iOS.
Web Clips – click Add Web Clips and select the web clips from the list, or create a new web clip (if no web clip has been pre-defined). To create web clips, see Web Clip configurations for iOS.
Email Settings – click Add Email Settings and select the emails from the list, or create a new email (if no email has been pre-defined). To create emails, see Email Settings configurations for iOS.
Certificates – click Add Certificates and select the certificates from the list, or create a new certificate (if no certificate has been pre-defined). To create certificates, see Certificates configurations for iOS.
Global HTTP Proxy – select a global HTTP proxy from the drop-down list. To create global HTTP proxies, see Global HTTP Proxy configurations for iOS.
Wallpaper – select a wallpaper from the drop-down list. To create wallpapers, see Wallpaper configurations for iOS.
Lock screen message – Specify the message to be displayed at the bottom of the lock screen up to a maximum of 36 characters.
Track device location – Select this option to track the most recently reported location. This feature requires the Deep Freeze MDM App to be installed on the device.
Apps
Select the app you wish to add from the list of apps displayed. The selected apps will be installed on the devices. To add apps to the list, see Adding iOS apps. Note that if Kiosk mode is enabled for the group, the selected apps may or may not be installed, depending on the app.
Restrictions
Device Functionality
Allow camera – select this checkbox to allow the camera. If this option is not selected, the camera icon is hidden and removed from the Home screen. Users can't take photographs or videos, or use FaceTime.
Allow screenshots – select this checkbox to allow the user to take screenshots. If this option is not selected, save a screenshot or screen recording of the display.
Always require iTunes Store password – select this checkbox if you want the user to always enter the password to iTunes.
Allow Siri – select this checkbox to allow Siri. If this option is not selected, users will not be able to launch Siri.
Allow Siri when locked – select this checkbox to allow Siri when the device is locked.
Content Rating
Allow Bookstore erotica – select this option to allow the device to access erotica through the Bookstore.
Allowed App rating – select the allowed app rating from the drop-down.
Allowed Movie rating – select the allowed movie rating from the drop-down.
Allowed TV rating – select the allowed TV rating from the drop-down.
iCloud
Allow Photo Stream – select this checkbox to allow Photo Stream. If this option is not selected, Upload to My Photo Stream is hidden in Settings > [your name] > iCloud > Photos.
Allow Shared Photo Stream – select this checkbox to allow shared Photo Stream. If this option is not selected, iCloud Photo Sharing is hidden in Settings > [your name] > iCloud > Photos.
Allow iCloud backup – select this checkbox to allow users to perform iCloud backup. If this option is not selected the iCloud Backup option in Settings > [your name] > iCloud > iCloud Backup is disabled and the backup can only be performed using iTunes.
Supervised Devices Only – the following restrictions can be set only for supervised devices:
Allow AirDrop – select this option to allow AirDrop. If this option is not selected, the users will not be able to share files with other iOS devices using the AirDrop feature.
Allow account modification – select this option to allow users to log on to the iTunes Store. If this checkbox is not selected, the users will not able to log on to the iTunes Store and change the password.
Allow apps to modify cellular data usage – select this option to allow users to select which apps can use cellular data. If this option is not selected, users can't change any settings regarding what apps use cellular data.
Allow app removal – select this option to allow users to uninstall apps from the device.
Allow Siri to access user generated content – select this option to allow Siri to obtain user generated content. If this option is not selected, Siri can't obtain content from sources that allow user-generated content, such as Wikipedia.
Allow Bookstore – select this option to allow iBooks. If this option is not selected, iBooks app will be empty and users will not be able to access books.
Allow iMessage – select this option to allow iMessage. If this option is not selected, only text messages will be allowed and iMessage will be disabled.
Allow FaceTime – select this option to allow FaceTime video and audio calls. To allow FaceTime, Camera has to be allowed on the device. If the device uses iOS 13.0 (or iPadOS 13.1) or later, it must be supervised to support this option.
Allow Bluetooth modifications – select this option to allow modifying the Bluetooth settings.
Allow device name modifications – select this option to allow users to modify device name. If this option is not selected, users cannot modify the device name from Settings > General > About > Name.
Allow Find My Friends modifications – select this option to allow modifications in the My Friends app such as Current Location, Share My Location, Send As, Allow Friend Requests and Show Geofence Alerts from.
Allow Game Center – select this option to allow the Game Center application. If this option is not selected, Game Center is disabled and the icon is not visible.
Allow host paring – select this option to allow iOS devices with hosts such as a MacBook or iMac. If this option is not selected, users will only be able to pair the device with MacBook or iMac from where the device was first supervised using the Apple Configurator.
Allow interactive installation of profiles and certifications – select this option to enable the Install option while installing End User Digital Certificates and profiles. If this checkbox is not selected, the Install option will be disabled and the user cannot install End User Digital Certificates.
Allow News – select this option to allow the iOS News widget. The news widget will not be shown if this option is not selected.
Allow Wallpaper Modification – select this option to allow users to modify their wallpaper. The Wallpaper option will be disabled in Settings if this option is not selected.
Allow USB Restricted Mode (iOS 11.4.1) – select this option to lock down the device charging port into power-only mode when connected to the computer one hour after it was last unlocked.
Allow AutoFill Password (iOS 12+) – select this option to enable password AutoFill or choosing from saved passwords.
Force automatic Date & Time (iOS 12+) – select this option to set the device to adjust automatically for date and time changes such as daylight savings time or time zone changes.
Allow explicit content – select this checkbox to allow explicit content. Allow explicit content
Allow iCloud document sync – select this checkbox to allow syncing documents to iCloud from Pages or iWork. If this option is not selected, Pages or iWork will not be able to sync with iCloud.
Allow App installation – select this checkbox to allow users to install apps from the Apple App Store. If this option is not selected, users will be prevented from installing apps on their own.
Allow Safari – select this checkbox to allow the Safari browser. If this option is not selected, Safari browser will be disabled.
Delay OS Software Updates until x days after release date (iOS 11.3) – select this option to delay OS software updates until up to 90 days.
Passcode
Require a Passcode – select to reveal settings and select the values for the following fields
Require alphanumeric value – select the checkbox to enforce an alphanumeric value for the passcode.
Allow simple value – select the checkbox to allow repeating, ascending and descending character sequence.
Minimum length – specify the minimum length of the passcode.
Minimum number of complex characters – specify the number of complex characters that a passcode must contain.
Maximum age in days – specify the number of days after which passcode must be changed.
Passcode history – specify the number of unique passcodes before reuse (0-50).
Maximum grace period before lock – specify the amount of time device can be locked before a passcode is required to unlock it.
Maximum number of failed attempts – specify the number of attempts before device is erased.
Maximum auto-lock time – specify the duration after which the device automatically locks.
Kiosk Mode
To create kiosks, you must create a group that has Kiosk Mode enabled. Kiosk Mode is a set of restrictions that defines what app the kiosks will run, and what device controls and features the user can access while using the app. Once the group is created, you can add devices to the group to configure them as kiosks. Any number of devices can be added to the group, and you can make any number of kiosk groups-one for each different app.
Select the Enable Kiosks Mode (Single App Mode) option to enable Kiosks Mode.
Use the Select app to run in Single App Mode field to select which app the kiosks will run.
Note that the app you select will be automatically installed on devices added to the group (if it is not already installed).
Select which device features should be Always Enabled (if any). If a feature is enabled, it will be always active/available and users will not have the option to disable it.
Touch – enable this option to allow devices to respond to input from the touchscreen.
Motion (Screen Rotation) – enable this option to allow the screen orientation to rotate according to the device orientation.
Volume Buttons – enable this option to allow devices to respond to input from the volume buttons.
Side Switch – enable this option to allow devices to respond to input from the side switch. Note that the side switch is only present on certain iPad models.
Sleep/Wake Buttons – enable this option to allow devices to respond to sleep/wake commands generated by pressing the power button.
Auto-Lock – enable this option to have the device automatically lock after a defined period of inactivity.
Voice Over – enable this option to enable Voice Over mode, where the device automatically reads aloud whatever is touched on the screen using text-to-speech. Note that if you enable this accessibility feature here, it will always be enabled and users will not be able to turn it off.
Zoom – enable this option to enable zoom mode, which enlarges everything displayed on the device. Note that if you enable this accessibility feature here, it will always be enabled and users will not be able to turn it off.
Devices added to the group will adopt the current value of this option, but toggling the option has no effect on devices that are already members of the group.
Invert Colors – enable this option to invert the display colors. Note that if you enable this accessibility feature here, it will always be enabled and users will not be able to turn it off.
Devices added to the group will adopt the current value of this option, but toggling the option has no effect on devices that are already members of the group.
Assistive Touch – enable this option to enable the Assistive Touch feature, which allows users to replace certain touchscreen actions (such as pinching or double-tapping) with a single touch. Note that if you enable this accessibility feature here, it will always be enabled and users will not be able to turn it off.
Devices added to the group will adopt the current value of this option, but toggling the option has no effect on devices that are already members of the group.
Speak Selection – enable this option to enable the Speak Selection feature, which gives the user the option to have text they select read aloud using text-to-speech.
Devices added to the group will adopt the current value of this option, but toggling the option has no effect on devices that are already members of the group.
Mono Audio – enable this option to restrict audio output to mono audio. Note that if you enable this accessibility feature here, it will always be enabled and users will not be able to turn it off.
Select which Accessibility Shortcuts (if any) should be available when using the kiosk devices. If a shortcut is enabled, users will be able to turn the associated accessibility feature on and off according to their needs.
Voice Over – enable this option to permit users to toggle Voice Over mode.
Zoom – enable this option to permit users to toggle Zoom mode.
Invert Colors – enable this option to permit users to invert display colors.
Assistive Touch – enable this option to permit users to toggle Assistive Touch mode.
Assigning iOS Devices to Groups
Complete the following steps to assign iOS devices to Groups:
Go to MDM > Devices.
Click the iOS icon.
Select one or more devices.
Hover over Move to Group to display the groups available for the selected device type.
Select a group to move the selected devices to that group.
The mobile devices are now added to the group. When the mobile devices check-in, the apps assigned to the group are installed on the device.
Last updated