IBM Support

New restrictions added in macOS Device Functionality Restrictions

Release Notes


Abstract

New restrictions added in macOS Device Functionality Restrictions

Content

From 10.68, MaaS360 includes additional Device Functionality Restrictions in macOS MDM policy. Configure the following new Device Functionality Restrictions frommacOS MDM policyRestrictionsFunctionality.
 

Device Functionality Restriction Description Supported version
Allow use of Camera If disabled, usage of camera on the device is restricted. macOS 10.11+
Allow Cloud Mail If disabled, usage of macOS Mail Cloud services on the device is restricted. macOS 10.12+
Allow Cloud Calendar If disabled, macOS iCloud calendar services on the device is restricted. macOS 10.12+
Allow Cloud Reminders If disabled, macOS iCloud Reminder services on the device is restricted. macOS 10.12+
Allow Cloud Address Book If disabled, macOS iCloud Address Book services on the device is restricted. macOS 10.12+
Allow Cloud Notes If disabled, macOS iCloud Notes services on the device is restricted. macOS 10.12+
Allow Cloud Document Sync If disabled, document and key-value syncing to iCloud is restricted. macOS 10.12+
Allow Cloud Keychain Sync If disabled, iCloud keychain synchronization is restricted on the device. macOS 10.12+
Allow Content Caching If disabled, content caching on the device is restricted. macOS 10.12+
Allow iTunes File Sharing If disabled, iTunes application file sharing services on the device is restricted. macOS 10.12+
Allow Spotlight Internet Results If disabled, Spotlight will not return Internet search results on the device. macOS 10.12+
Allow Music Service If disabled, Music service is disabled on the device and Music app reverts to classic mode.  macOS 10.12+
Allow Auto Unlock If disabled, restricts automatic unlock on the device.  macOS 10.12+

Configure Delay for Software Updates

  • Number of Days to Delay (1-90 days)

The restriction forcefully delays software updates on the device for the number of days the restriction is applied. By default, this restriction is unchecked.

On enabling Configure Delay for Software Updates, you are provided an option to select number of days to restrict user visibility to device software updates. Allowed values are 1-90 days. Default allowed value is 30 days. Administrator can edit the default value and choose any of the allowed values.

macOS 10.13+

 

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSYSXX","label":"IBM MaaS360"},"Component":"","Platform":[{"code":"PF017","label":"Mac OS"}],"Version":"All Versions","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Document Information

Modified date:
29 November 2018

UID

ibm10739319