Now Loading
Logo Image

Proget Console

Home  /  Proget Console  /  Administrator guide  /  Policies  /  macOS

macOS

Password
Password required
  • Policy defines requirements for device password. Once done, user must set the device password.
    • Password length
  • The policy defines the minimum length of the password used on the device.
    • Number of attempts to unlock
  • Policy defines the number of failed attempts to enter the password the user may make prior to blocking the device.
    • Number of passwords saved
  • Policy defines how many prior passwords the device should remember while changing the password.
    • Password expiration (in days)
  • Policy defines how long the password may be used and sets the time for the user to change the password on the device. For value 0, the password does not expire.
    • Device block grace period
  • Policy definiens the maximum time for user to unblock the device again without entering the password.
    • Allow unlock device using fingerprint
  • Policy determines whether the user can use a fingerprint to unlock the device. If the policy is disabled, the user must enter a password to unlock the device.
    • Allow device password changes (supervisor mode)
  • Policy determines whether a user can add, change, or remove device passwords.
    • Max inactive time (in minutes)
  • Policy defines user inactive time duration, then blanks the screen and blocks the device with the current password.
    • Allow to auto unlock device
  • Policy determines whether the automatic device unlock function is available.
    • Apps
    Allow using App Store
  • Policy defines the use of App Store.
    • Allow use of Game Center (supervisor mode)
  • Policy determines whether the Game Center is available on the device. If the policy is disabled, the Game Center icon is removed from the home screen and the user cannot use the Game Center.
    • Allow multiplayer gaming (supervisor mode)
  • Policy determines whether the user can use multiplayer in games. If the “Allow add friends to Game Center” policy is disabled, the user can only play multiplayer games with existing friends. If the policy is disabled, the user cannot use multiplayer in games and cannot add new friends to the Games Center.
    • Adding Friends from Game Center (supervisor mode)
  • If unselected, prohibits adding friends to Game Center.
    • Allow iTunes Filesharing
  • If unselected, disables iTunes file sharing services.
    • Allow autocomplete of fields
  • Policy defines if browser may use autocomplete.
    • Default domains
    Email domains
  • Policy defines email domains that will be considered as default email domains. Email addresses from other domains will be highlighted as external email in Mail app.
    • Education
    Allow remote screen observation (supervisor mode)
  • If unselected, disables remote screen observation by the Classroom app. If allow screenshot is unselected, the Classroom app doesn’t observe remote screens.
    • Require automatically join to ides (supervisor mode)
  • If selected, automatically gives permission to the teacher’s requests without prompting the student.
    • Require request permission to leave ides (supervisor mode)
  • If selected, a student enrolled in an unmanaged course through Classroom requests permission from the teacher when attempting to leave the course.
    • Allow app and device lock (supervisor mode)
  • If selected, allows the teacher to lock apps or the device without prompting the student.
    • Allow screen observation (supervisor mode)
  • If selected and Allow remote screen observation is also selected, a student enrolled in a managed course via the Classroom app automatically gives permission to that course teacher’s requests to observe the student’s screen without prompting the student.
    • Functionality
    Allow camera
  • The policy allows the use of the camera. If unchecked, the camera will not work in all apps.
    • Allow to take screenshots and record screen
  • Policy determines whether the user can take screenshots and record the screen.
    • Allow use AirDrop (supervisor mode)
  • Policy determines whether the user can use the AirDrop sharing feature. If the policy is disabled, the user cannot use AirDrop in any applications, and the AirDrop option is removed from the Control Center.
    • Allow use Apple Music service (supervisor mode)
  • Policy determines whether the user has access to Apple Music service. If the policy is disabled, the Music application returns to the idic mode.
    • Synchronization of documents with iCloud (supervisor mode)
  • If unselected, disables document and key-value syncing to iCloud.
    • Allow iCloud Desktop and Documents
  • If false, disables cloud desktop and document services.
    • Allow keychain sync with iCloud
  • If unchecked, disables iCloud keychain syncing.
    • Allow use iCloud Photo Library (supervisor mode)
  • Policy determines whether a user can upload photos to iCloud Photo Library.
    • Allow iCloud Address Book
  • If false, disables iCloud Address Book services.
    • Allow iCloud Bookmarks
  • If false, disables iCloud Bookmark sync.
    • Allow iCloud Calendar
  • If false, disables iCloud Calendar services.
    • Allow iCloud Mail
  • If false, disables iCloud Mail services.
    • Allow iCloud Notes
  • If false, disables iCloud Notes services.
    • Allow iCloud Reminders
  • If false, disables iCloud Reminder services.
    • Allow iCloud Private Relay (supervisor mode)
  • Policy determines whether the iCloud Private Relay internet privacy service is available.
    • Allow wallpaper changes (supervisor mode)
  • Policy determines whether the user can change the wallpaper of the device screen.
    • Allow use Handoff
  • Policy determines whether the user can use the feature to transfer user activities among multiple devices associated with the user.
    • Allow Internet results in Spotlight (supervisor mode)
  • Policy determines whether the user can use Spotlight search returns to Internet search when searching for content on a device.
    • Send diagnostic data to Apple
  • Policy defines if diagnostic data should be sent to Apple.
    • Allow dictation (supervisor mode)
  • If unselected, disallows dictation input.
    • Allow password autofill (supervisor mode)
  • If unselected, disables the AutoFill Passwords feature in macOS (with Keychain and third-party password managers) and the user isn’t prompted to use a saved password in Safari or in apps.
    • Allow password request from nearby devices (supervisor mode)
  • If unselected, disables requesting passwords from nearby devices. Feature limited to requesting Wi-Fi access password.
    • Allow password sharing via AirDrop (supervisor mode)
  • If unselected, disables sharing passwords with the Airdrop Passwords feature.
    • Enable Activation Lock for devices with Apple Business Manager (supervisor mode)
  • The policy enforces the use of Activation Lock for devices in supervisor mode with Apple Business Manager.
    • Allow Activation Lock (supervisor mode)
  • The policy allows Activation Lock for devices in supervisor mode.
    • Force delayed app software updates (supervised mode)
  • If selected, delays user visibility of non-OS Software Updates.
    • Delayed OS updates (supervisor mode)
  • If selected, delays user visibility of OS updates.
    • Delay software updates (supervisor mode)
  • Sets how many days to delay a software update on the device. With this restriction in place, the user doesn’t see a software update until the specified number of days after the software update release date.