Restrictions configuration (macOS device policy)
With the Restrictions configuration you define restrictions for Macs.
Some settings are only available for certain device types or operation system versions. For details, see the labels next to a setting in Sophos Mobile.
|Allow use of camera
|If the check box is cleared, the camera is unavailable and the Camera icon is removed from the Home screen. Users cannot take pictures, record videos, or use FaceTime.
|Allow internet search result for Spotlight
|If the check box is cleared, Spotlight does not return internet search results.
|Allow Apple Music
|Users can access the Apple Music library.
|macOS software update delay
The number of days that an update of the macOS software is delayed after its release date.
Enter a value between 0 (no delay) and 90.
|Allow Time Machine configuration
|Users can change the Time Machine settings to configure backups to external storage devices.
|Allow Startup Disk configuration
|Users can change the Startup Disk setting to start the Mac from a different disk or a network volume.
|Allow Bluetooth Sharing configuration
|Users can change the Bluetooth Sharing settings to configure sharing files between the Mac and other Bluetooth devices.
|Users can back up their devices to iCloud.
|Allow iCloud Photo Library
|Users can use iCloud Photo Library.
|Allow iCloud Keychain sync
Users can use iCloud Keychain to synchronize passwords across their iPhones, iPads, and Macs.
If the check box is cleared, iCloud Keychain data is only stored locally on the device.
|Allow document sync
|Users can store documents and app configuration data in iCloud.
|Allow Back to My Mac
|Users can use iCloud Back to My Mac, i.e. file and screen sharing between a remote and a local Mac.
|Allow Find My Mac
|Users can use iCloud Find My Mac to locate, lock, or wipe their Mac remotely.
|Allow iCloud Bookmarks
|Users can use iCloud Bookmarks to synchronize web bookmarks between browsers and platforms.
|Allow iCloud Mail
|Users can set up an iCloud Mail account on their Mac.
|Allow iCloud Calendar
|Users can use iCloud Calendar to share their calendars across their devices and with other iCloud users.
|Allow iCloud Reminders
|Users can use iCloud Reminders to share reminder lists across their devices and with other iCloud users.
|Allow iCloud Address Book
|Users can use iCloud Address Book to share contacts across their devices and with other iCloud users.
|Allow iCloud Notes
|Users can use iCloud Notes to take notes and to share them across their devices and with other users.
|Allow iCloud Drive for Desktop and Documents
|Users can store their Mac Desktop and their Documents folder in iCloud Drive and access them on other devices.
|Allow iCloud for Freeform
|Users can store their Apple Freeform boards in iCloud to use them on other devices.
Security and privacy
|Allow Touch ID and Face ID to unlock device
|If the check box is cleared, the device can’t be unlocked by biometric authentication.
|Allow definition lookup
|Users can look up definitions for highlighted words.
|Allow fingerprint configuration
|Users can add and remove fingerprints for Touch ID.
|Allow Auto Unlock
|Users can use Auto Unlock to have their Mac automatically unlocked by their Apple Watch.
|Allow iTunes File Sharing
|Users can use File Sharing in iTunes to copy files between their Mac and an iPhone or iPad.
|Users can send files to AirPrint-enabled printers.
|Allow iBeacon discovery of AirPrint printers
The device uses iBeacon to discover AirPrint devices.
Warning If you allow this, malicious AirPrint devices can perform phishing attacks on network traffic.
|Force trusted certificates for AirPrint over TLS
|AirPrint over TLS is rejected if the AirPrint device uses an untrusted certificate.
|Allow password auto-fill
Users can turn on the AutoFill Passwords setting, which lets them use saved password or credit card information in Safari or other apps.
If this check box is cleared, automatic suggestion of strong passwords is disabled as well.
|Request Wi-Fi passwords from nearby devices
|The device requests passwords from nearby devices when setting up a Wi-Fi connection.
|Allow AirDrop password sharing
|Users can share passwords from Password Manager with other users via AirDrop.
|Allow File Sharing configuration
|Users can change the File Sharing settings to configure which files and folders they share with other users on the same local network.
|Allow Internet Sharing configuration
|Users can change the Internet Sharing settings to configure sharing the Mac’s internet connection with other computers on the same local network, for example, over Wi-Fi.
|Allow Printer Sharing configuration
|Users can change the Printer Sharing settings to configure sharing their printer with other Macs or UNIX computers on the same local network.
|Allow Remote Application Scripting configuration
Users can change the Remote Application Scripting settings to configure users that can send Apple events to the Mac from other computers.
Apple events are tasks that apps on other computers prompt the Mac to perform, such as opening or printing a document stored on the Mac.
|Allow Remote Management configuration
|Users can change the Remote Management settings to configure remote access to the Mac.
|Allow adding users
|Users can add user accounts in System Settings.