Workforce Identity
Endpoint Management
Endpoint Detection & Response
Vulnerability Management
Compliance Automation
Trust Center
Apple Restrictions
Published by Apple, Inc.
Control device behavior and security with granular configuration policies across your Apple devices. Apply comprehensive restrictions to manage functionality, security settings, and user experience—from app limitations and content filters to hardware features and network controls. Supervision-required options unlock advanced restrictions for iPhone, iPad, Apple TV, and Vision Pro devices, enabling deeper organizational control.
Gatekeeper enforces code signing and notarization requirements to protect Mac devices from malicious software. Configure policies to allow applications from the App Store only, identified developers, or custom trust settings. Manage security assessments for downloaded files, control Gatekeeper bypass permissions, and enforce application execution policies across your Apple devices. Essential for organizations maintaining security compliance while balancing user productivity needs and managing software deployment workflows.
Configure privacy and security settings for Mac devices, including location services, analytics data collection, camera and microphone access permissions, and diagnostic reporting preferences. Control system-level privacy features such as advertising tracking, Siri data usage, and app-specific permissions to protect sensitive information and ensure compliance with organizational privacy policies. Deploy this profile to enforce consistent privacy standards across Mac devices, meet regulatory requirements, or restrict data sharing with Apple and third-party services.
Lock down Mac system configuration by restricting end-user access to specific System Preferences panes. Prevent unauthorized modifications to critical settings like network configurations, security policies, sharing options, and user accounts—ensuring devices remain compliant with IT standards while reducing support overhead from accidental misconfigurations. Selectively hide or disable individual preference panes to create controlled user environments that balance self-service flexibility with administrative oversight, protecting your infrastructure from well-intentioned but problematic changes.