Functionality
Use the Functionality settings to restrict certain functions on macOS devices.
The following table describes the functions that you can restrict on macOS devices.
| Policy setting | Description | Supported devices |
|---|---|---|
| Allow Safari History Clearing | If this setting is disabled, the system prevents users from clearing their browsing history in Safari and can ensure that browsing data remains available for administrative review and compliance purposes. | macOS 26.0 and later |
| Allow Safari Private Browsing | If this setting is disabled, the system prevents users from using private browsing session in Safari. | macOS 26.0 and later |
| Allow Call Recording | If this setting is disabled, the system prevents users from call recording on macOS devices that support phone calls. | macOS 26.0 and later |
| Allow Live Voicemail | If this setting is disabled, the system prevents users from accessing the live voicemail on the device. | macOS 26.0 and later |
| Allow Writing Tools | If this setting is disabled, Apple Intelligence writing tools is turned off on a supervised device. | macOS 15.0 and later |
| Allow iPhone Mirroring | If this setting is disabled, iPhone Mirroring is blocked. It prevents the Mac from mirroring any iPhone. | macOS 15.0 and later |
| Allow Image Playground | If this setting is disabled, the image generation is not allowed. | macOS 15.0 and later |
| Allow Account Modification | The user can modify the account. | macOS 14.0 and later |
| Modify Device Name | The user can change the device name. | macOS 14.0 and later |
| Modify Fingerprint | The user can modify Touch ID or Face ID. | macOS 14.0 and later |
| Enable Siri | The user can enable Siri. | macOS 14.0 and later |
| Modify Remote Management Sharing | The user can modify the remote management sharing setting in system settings. | macOS 14.0 and later |
| Modify Bluetooth Sharing | The user can modify the Bluetooth Setting in System Setting. | macOS 14.0 and later |
| Allow iCloud Freeform Services | The user can enable iCloud Freeform services. | macOS 14.0 and later |
| Modify File Sharing | The user can modify file sharing setting in System Settings. | macOS 14.0 and later |
| Modify Internet Sharing | The user can modify Internet Sharing setting in System Settings. | macOS 14.0 and later |
| Local User Creation | The user can create Local User in System Settings. | macOS 14.0 and later |
| Printer Sharing Modification | The user can modify Printer Sharing setting in System Settings. | macOS 14.0 and later |
| Modify Remote Apple Events | The user can modify Remote Apple Events Sharing setting in System Settings. | macOS 14.0 and later |
| Modify Startup Disk | The user can modify Startup Disk setting in System Settings. | macOS 14.0 and later |
| Modify Time Machine Backup | The user can modify Time Machine setting in System Settings. | macOS 14.0 and later |
| Allow Universal Control | If this setting is disabled, Universal Control is disabled. | macOS 13.0 and later |
| Allow UI Configuration Profile Installation | If this setting is disabled, prohibits the user from installing configuration profiles and certificates interactively. | macOS 13.0 and later |
| Allow USB Restricted Mode | If this setting is disabled, allows the device to always connect to USB accessories while locked. | macOS 13.0 and later |
| Allow Erase All Content & Settings | The Erase All Content and Settings option in device is used to erase all settings, media, and data on macOS devices. When this setting is turned off, the Erase All Content And Settings option in the Reset UI is unavailable. The default value is True. | macOS 12.0 and later |
| Allow Activity Continuation | If this setting is disabled, prohibits user's activity continuation. | macOS 10.15 and later |
| Allow Deprecated WebKit TLS | If this setting is enabled, the deprecated TLS 1.0/1.1 behavior in Safari is allowed. | macOS 10.15.4 and later |
| Allow Password Sharing | The device can share passwords with other devices by using the Airdrop passwords feature. | macOS 10.14 and later |
| Allow Password Auto Fill | The device saves passwords in Safari or in apps. | macOS 10.14 and later |
| Allow Password Proximity Requests | The device requests passwords from nearby devices. | macOS 10.14 and later |
| Allow Remote Screen Observation | If this setting is disabled, disables remote screen observation by the Classroom app. | macOS 10.14 and later |
| Allow Screenshot | The device allows screen captures and screen recordings. If this setting is disabled, screen captures and screen recordings are restricted on the device. | macOS 10.14.4 and later |
| Allow AirPrint | The use of AirPrint is allowed on the device. | macOS 10.13 and later |
| Allow AirPrint Beacon Discovery | The iBeacon discovery of AirPrint printers is allowed on the device. Disabling this setting prevents fraudulent AirPrint Bluetooth beacons from phishing for network traffic. The default value is true. | macOS 10.13 and later |
| Force AirPrint Trusted Requirement | Trusted certificates are required for TLS printing communication. The default value is false. | macOS 10.13 and later |
| Configure Delay for Software Updates | The user visibility of software updates is delayed. The seed build updates on macOS devices that are allowed without delay. | macOS 10.13 and later |
| Number of Days to Delay (1-90 days) | The number of days a software update on the device is delayed. The software update is not displayed to users until the specified number of days after the software update release date. The maximum number of days is 90 and the default value is 30. | macOS 10.13 and later |
| Allow Auto Fill in Safari | If this setting is disabled, disallows Safari AutoFill for passwords, contact info, and credit cards and also prevents the Keychain from being used for AutoFill. Though third-party password managers are allowed and apps can use AutoFill. | macOS 10.13 and later |
| Allow Passcode Modification | If this setting is disabled, prevents the device passcode from being added, changed, or removed. | macOS 10.13 and later |
| Allow Wallpaper Modification | If this setting is disabled, prevents wallpaper from being changed. | macOS 10.13 and later |
| Allow Diagnostic Submission | If this setting is disabled, prevents the device from automatically submitting diagnostic reports to Apple. | macOS 10.13 and later |
| Allow Dictation | If this setting is disabled, disallows dictation input. | macOS 10.13 and later |
| Allow Game Center | If this setting is disabled, disables Game Center, and its icon is removed from the Home screen. | macOS 10.13 and later |
| Allow Adding Game Center Friends | If this setting is disabled, prohibits adding friends to Game Center. | macOS 10.13 and later |
| Allow Multi Player Gaming | If this setting is disabled, prohibits multi player gaming. | macOS 10.13 and later |
| Allow Cloud Photo Library | The iCloud Photo Library is allowed on the device. Photographs that are not fully downloaded from the iCloud Photo Library to the device are removed from local storage. | macOS 10.12 and later |
| Allow Auto Unlock | The device can be automatically unlocked at any time. | macOS 10.12 and later |
| Allow Cloud BTMM | The device uses macOS Back to My Mac iCloud services. | macOS 10.12 and later |
| Allow Cloud FMM | The device uses macOS Find My Mac iCloud services. | macOS 10.12 and later |
| Allow Cloud Address Book | The device uses macOS iCloud Address Book services. | macOS 10.12 and later |
| Allow Cloud Mail | The device uses macOS Mail iCloud services. | macOS 10.12 and later |
| Allow Cloud Bookmarks | The device uses macOS iCloud bookmarks. | macOS 10.12 and later |
| Allow Cloud Reminders | The device uses iCloud Reminder services. | macOS 10.12 and later |
| Allow Cloud Calendar | The device uses macOS iCloud Calendar services. | macOS 10.12 and later |
| Allow Cloud Document Sync | The document and key-values on the device are synchronized with iCloud. | macOS 10.12 and later |
| Allow Cloud Keychain Sync | The device uses iCloud keychain synchronization. | macOS 10.12 and later |
| Allow Cloud Notes | The device uses macOS iCloud Notes services. | macOS 10.12 and later |
| Allow Content Caching | The device caches content. | macOS 10.12 and later |
| Allow iTunes File Sharing | The device uses iTunes application file sharing services. | macOS 10.12 and later |
| Allow Music Service | The device uses the music service. If this setting is disabled, the Music app reverts to classic mode. | macOS 10.12.4 and later |
| Allow Spotlight Internet Results | The device uses Spotlight internet search results. | macOS 10.12 and later |
| Allow Definition Lookup | The device looks up definitions. | macOS 10.12 and later |
| Allow Finger Print Unlock | The device cannot be unlocked with Touch ID. | macOS 10.12.4 and later |
| Allow macOS cloud desktop and document services | The macOS cloud desktop and document services are allowed on the device. The default value is true. | macOS 10.12.4 and later |
| Allow use of camera | The device can use a camera. | macOS 10.11 and later |