Apple Restrictions

SettingDescription
Allow pairing with Non-Configurator hosts ( Supervised Only ) - Default RestrictionWhen this option is off, users can't pair their iOS device with anything but the Mac with Apple configurator 2 installed where the device was first supervised
Allow VPN connections - Default RestrictionWhen this option is off, users cannot create VPN connections.
Allow modifying account settings ( Supervised Only )When this option is off users can't create new accounts or change their username, password or other settings associated with the account.
Allow installing apps using App Store ( Supervised Only )When this option is off, users can't use the App Store to install apps.
Allow removing apps ( Supervised Only )When this option is off, users can't remove installed apps.
Allow SiriWhen this option is off, Siri will not work
Allow iBooks Store ( Supervosed only )When this option is off, the iBooks store is disabled and users can't access it from the iBooks application
Allow explicit sexual content in iBooks Store - Default RestrictionWhen this option is off, explicit sexual content purchased from the iBooks store is hidden. Explicit content is flagged by content providers when sold through the iBooks Store
Allow iCloud backupWhen this option is off, device backup is performed only in iTunes
Allow sending diagnostics and usage data to AppleWhen this option is off, users can't choose to send diagnostics information to Apple
Allow erase all content and settings ( Supervised Only ) - Default RestrictionWhen this option is off, users can't erase their device and reset it to factory defaults
Allow FaceTimeWhen this option is off, users can't place or receive FaceTime audio or video calls
Allow use of Game Center ( Supervised Only )When this option is off, The Game Center app and its icon are removed
Allow News ( Supervised Only )When this option is off, users can't use the News App
Allow Podcasts ( Supervised Only )When this option is off, users can't donwload Podcasts
Allow use of SafariWhen this option is off, the Safari web browser app is disabled and the icon of it is removed from the Home Screen. This also prevents users from opening webclips
Allow Spotlight SuggestionsWhen this option is off, Spotlight will not return any results from an Internet search
Allow installing apps using Apple Configurator 2 and iTunesWhen this option is off, AppStore is disabled and its icon is removed from the Home Screen. Users can't install or update apps from the AppStore, iTunes or MDM. In-house enterprise apps can still be installed and updated
Allow installing configuration profiles ( Supervised Only )When this option is off, configuration profiles can't be manually installed by users
Allow use of iTunes StoreWhen this option is off, the iTunes store is disabled and its icon is removed from the Home screen. Users can't preview, purchase or download content
Rating AppsMaximum allowed ratings for apps
Rating MoviesMaximum allowed ratings for movies
Rating TV ShowsMaximum allowed ratings for TV Shows
Enable Siri profanity filter ( Supervised Only )When this option is off, the profanity filter in Siri isn't enabled. The default is On
Force encrypted backups - Default RestrictionWhen this option is off, users can choose whether or not device backups performed on iTunes are stored in encrypted format on the user's Mac. If any profile is encrypted and this option is turned off, encryption of backups is required and enforced by iTunes. Profiles installed on the device by Profile Manager are never encrypted
Require iTunes password for all purchases - Default RestrictionWhen this option is off, iTunes in-app purchases don't prompt for the account password. The default is on
Allow AirDrop ( Supervised Only )When this option is off, users can't user AirDrop with any apps
Allow handoffWhen this option is off, users can't use Handoff with their Apple Devices
Allow adding Game Center friendsWhen this option is off, users can't find or add any friends in Game Center
Allow modifying cellular data app Settings (supervised only)When this option is off, users can't change any settings regarding what apps use cellular data
Allow Siri while device is lockedWhen this option is off, Siri only responds when the device is unlocked
Allow user-generated content in Siri (supervised only)When this option is off, Siri can't obtain content from sources that allow user-generated content such as Wikipedia
Allow auto-correction (supervised only)When this option is off, users won't see any word correction suggestions
Allow automatic app downloads (supervised only)When this option is off, the app store won't automatically download apps
Allow use of cameraWhen this option is off, cameras are disabled and the camera icon is removed from the homescreen. Users can't take pictures or videos or use facetime
Allow automatic updates to certificate trust settingsWhen this option is off, automatic updates to certificate trust settings can't occur
Allow iMessages (supervised only)When this option is off, for devices only with Wifi the messages app is hidden. when this option is off for devices with wifi and cellular data the messages app is still available but only the SMS/MMS service can be used
Allow iCloud documents and dataWhen this option is off, documents and data aren't added to iCloud
Allow iCloud photo sharingWhen this option is off, users can't subscribe to or publish shared photo streams
Allow iCloud keychainWhen this option is off, iCloud keychain isn't used
Allow define (supervised only)When this option is off, users can't double-tap to search for a word's definition
Allow modifying device name (supervised only)When this option is off, users can't change the name of the device as shown in Settings - General - About
Allow modifying restrictions (supervised only)When this option is off, users can't set their own restrictions on their own device
Allow trusting new enterprise app authorsWhen this option is off, users can't allow new enterprise apps authors to be trusted, which prohibits apps from those authors from opening
Allow backup of enterprise booksWhen this option is off, users can't backup books distributed by their organisation to iCloud or iTunes
Allow notes and highlights sync for enterprise booksWhen this option is off, users can't sync notes or highlights to other devices using iCloud
Allow playback of explicit music, podcasts and iTunes U content - Default RestrictionWhen false, explicit music or video content purchased from the iTunes store is hidden. Explicit content is marked as such by content providers such as record labels when sold through the iTunes store. This key is deprecated on unsupervised devices
Allow modifying find my friends settings (supervised only)When this option is off, users can't change any settings in the find my friends app
Allow touch id to unblock deviceWhen this option is off, users must use a passcode to unlock the device
Allow modifying touch id fingerprints (supervised only)When this option is off, users can't add or remove existing touch id information
Allow automatic sync while roamingWhen this option is off, devices that are roaming sync only when an account is accessed by the user
Allow in-app purchaseWhen this option is off, users can't make in-app purchases
Allow keyboard shortcuts (supervised only)When this option is off, users can't use any keyboard shortcuts
Show control center and lock screenWhen this option is off, users can't swipe up to view control center
Show notification center in lock screenWhen this option is off, users can't receive notifications if the screen is locked
Show today view in lock screenWhen this option is off, users can't swipe down to see notification center using the today view in the lock screen
Allow managed apps to store data in iCloudWhen this option is off, users can't store data from managed apps in iCloud
Allow multiplayer gaming (supervised only)When this option is off, users can't play multiplayer games in Game Center
Allow music serviceIf set to false, music service is disabled and music app reverts to classic mode. Defaults to true
Allow documents from managed sources in unnamed destinationsWhen this option is off, documents created or downloaded from managed sources can't be opened in unnamed destinations
Allow documents from unmanaged sources in named destinationsWhen this option is off, documents created or downloaded from unmanaged sources can't be opened in named destinations
Allow pairing with Apple Watch (supervised only)When this option is off, users can't pair their supervised iPhone with Apple Watch
Show wallet notifications in lock screenWhen this option is off, users must unblock the device to use wallet
Allow modifying passcode (supervised only)When this option is off, users can't change the set passcode
Allow my photo streamWhen this option is off, photos in my photo stream are erased from the device, photos from the camera roll aren't sent to my photo stream and photos and videos in shared streams can no longer be viewed from the device - Important: if there are no other copies of these photos and videos they may be lost
Allow predictive keyboard (supervised only)When this option is off, users won't see the predictive keyboard
Allow radio serviceIf set to false, Apple Music Radio is disabled, defaults to true
Allow screenshots and screen recordingsWhen this option is off, users can't save a screenshot or screen recording of the display
Allowed shared streamIf set to false, shared photo stream is disabled. The default is true
Allow spell-check (supervised only)When this option is off, users won't see potentially misspelled words underlined in red
Allow users to accept untrusted TLS certificatesWhen this option is off, users aren't asked if they want to trust security certificates that can be verified. This setting applies to Safari, Mail, Contacts and Calendar accounts, When this option is on, only certificates with trusted root certificates are accepted without a prompt. To view the root CA's accepted by iOs see the Apple Support article listed with trusted root certificates
Allow video conferencingWhen false, disables vieo conferencing
Allow voice dialing while device is lockedWhen this option is off, users can't use voice commands to dial their phone when it's locked
Allow modifying wallpaper (supervised only)When this option is off, users can't modify the wallpaper for the lock screen or home screen
Force Air Drop unmanagedWhen this option is on, users don't see air drop as an option from a managed app. The default is off
Force AirPlay outgoing requests pairing passwordIf set to true, forces all devices receiving AirPlay requests from this device to use a pairing password. Default is false
Force AirPlay incoming requests pairing passowrdIf set to true, forces all devices sending AirPlay requests to this device to use a pairing password. Default is false
Force Apple Watch wrist detectionWhen this option is on, Apple Watch locks automatically when it's removed from the user's wrist. It can be unlocked with its passcode or with the paired iPhone. The default is off
Force limited and ad trackingWhen this option is off, apps can use the advertising identifier (a non-permanent device identifier) to serve the user targeted ads
Enable auto fillWhen this option is off, Safari doesn't remember what users enter in the web forms
Enable JavascriptWhen this option is off, Safari ignores all Javascript on websites
Allow pop-upsWhen this option is on, pop-ups aren't blocked in Safari. The default is on
Accept cookiesWhen this option is on, sets the cookie policy in Safari. Choose to always block all cookies, always accept all cookies, allow cookies from current websites only or from websites the users visits. The default is Always
Force fraud warningWhen this option is on, Safari attempts to prevent the user from visiting websites identified as being fraudulent or compromised. The default is off
Allow classroom AirPlayWhen this option is off, classroom AirPlay is not allowed
Allow Classroom Application LockWhen this option is off, classroom application lock is not allowed
Allow Classroom Device settings modificationWhen this option is off, Classroom Device settings modification is not allowed
Allow Classroom Lock DeviceWhen this option is off, Classroom Lock Device is not allowed
Allow Classroom Open AppWhen this option is off, Classroom Open App is not allowed
Allow Classroom Open Deep LinkWhen this option is off, Classroom Open Deep Link is not allowed
Allow Classroom Open URLWhen this option is off, Classroon Open URL is not allowed
Allow Classroom Screen ObservationWhen this option is off, Classroom Screen Observation is not allowed
Allow Classroom Diagnostics Submission ModificationWhen this option is off, Classroom Diagnostics Submission Modification is not allowed
Allow Find My CarWhen this option is off, Find my car is not allowed
Allow Find My FriendsWhen this option is off, Find My Friends is not allowed
Allow Hashtag ImagesWhen this option is off, Hashtag images are not allowed
Allow Health data submissionWhen this option is off, Health data submission is not allowed
Allow HomeWhen this option is off, Home is not allowed
Allow News TodayWhen this option is off, News Today is not allowed
Allow Remote App pairingWhen this option is off, Remote pairing app is not allowed
Allow Showing Undownloaded MoviesWhen this option is off, Showing Undownloaded Movies is not allowed
Allow Showing Undownloaded TVWhen this option is off, Showing Undownloaded TV is not allowed
Allow Spotlight NewsWhen this option is off, Spotlight News is not allowed
Allow TVWhen this option is off, TV is not allowed
Allow TV Provider ModificationWhen this option is off, TV Provider Modification is not allowed
Allow Today ViewWhen this option is off, Today view is not allowed
Allow Today View ModificationWhen this option is off, Today View Modification is not allowed
Allow Wheelchair Data SubmissionWhen this option is off, Wheelchair Data Submission is not allowed
Force Delayed Software UpdateWhen this option is off, software updates are always delayed
Force Unprompted Managed Classroom Screen ObservationWhen this option is off, Unprompted Managed Classroom Screen Observation is forced
Force Unprompted Remote Screen ObservationUnprompted Remote Screen Observation is forced
Force WiFi WhitelistingWhen this option is on, WiFi Whitelisting is forced
Allow Personal Hotspot ModificationWhen this option is off, the user may not moodify Personal Hotspot Setting
Force Automatic Date and TimeWhen this option is on, the date and time " Set automatically " feature is turned on and cannot be turned off by the user

Blacklisted Apps by Default

Name or Package name
Google+
Free VPN by Free VPN.org
Best VPN Proxy Betternet
HotspotShield VPN &
Wifi Proxy
ArkVPN: Standard Edition
VPN Express – Free Mobile VPN
com.govpn
Touch VPN – Unlimited Proxy
com.tigervpns.hideme.ios.HideMe
VPN Unlimited for iPhone, iPad
HexaTech Unlimited VPN Proxy
VPN in Touch
VPN Pro | Lifetime Proxy & Best VPN by
Betternet
SurfEasy VPN
VPN Unlimited Proxy AppVPN
Com.vpn.cool
Com.opera.OperaMini
Puffin Browser Pro
Tor Browser: Anonymity Onine
Red Onion – Tor-powered web browser for anonymous browsing and dark net
VPN + TOR Browser Private Web
Com.cs.onion2
Onion Browser
Safe Browser Secure
Com.cs.TorBrowser
Com.ronend.FreeTorBrowser
Photon Flash Player & Private Browser for iPad
Uk.co.bewhere.vpn.tor
Tra.duc.tor
Racoon – Anonymous Client for Onion Tor Browser
Photon Flash Player for iPhone – Flash Video & Games plus Private Web Browser
Com.longwei.myspecialbrowserfree
Puffin Web Browser
Dash Office
Com.flankerch.telegram
Loopy Messenger – Professional
GetGems for Telegram
TalkGram Unofficial Telegram
Ru.tcsbank.MTTelegramPROD
Ru.tcsbank.TCSMT
Com.aniways.TelegramWithAniways
Pro.shahho.org.telegram.TelegramEnterprise
OfficeGram Office Suite messenger with doc, xls
Ir.faraaz.mobilegram
Mahdi.mygram.telegram.TelegramEnterprise
CM Browser: Block ads trackers
Psiphon Browser
Tob
Private Browser + USA Wifi VPN
Me.nanolife.tor2
Com.bsdat.Convert-Browser
DownloadThemAll –Browser and File Manager for Documents
Ir.softwareco.telegram
Com.mywispi.wispiapp
DotVPN – a better way to VPN
Com.opera.vpn
Co.returnzero.torvpnbrowser
Com.innovationworks.accelerator
Karmiegram for X
Net.8talk.messenger
Telegram X
Com.ryzenrise.teleplus
Zap Zap Chat Messenger
Telepado
CloudVeil Messenger
Com.kurdit.msg
5sChat
Com.kabir.TorBrowser
Secure Onion Web Browser with –TOR-Powered Browsing
Com.alekseygerbyn.lion
DARKNET – TOR powered Browser
Onion TOR Browser + VPN
TOR –Powered Web Browser + VPN
iOnion
BananaVideo
Bubble.Live
Potato Chat
Messenger VPN
Turbo VPN Private Browser
Private Browser – Surf Safe
BIGO LIVE – LiveStream
ICrypt VPN Unlimited Proxy
БериДари