Functionality
Use the Functionality settings to restrict certain functions on macOS devices.
The following table describes the functions that you can restrict on macOS devices:
| Policy setting | Description | Supported devices |
|---|---|---|
| Allow AirPrint | The use of AirPrint is allowed on the device. | macOS 10.13 and later |
| Allow AirPrint Beacon Discovery | The iBeacon discovery of AirPrint printers is allowed on the device. Disabling this setting prevents fraudulent AirPrint Bluetooth beacons from phishing for network traffic. The default value is true. | macOS 10.13 and later |
| Force AirPrint Trusted Requirement | Trusted certificates are required for TLS printing communication. The default value is false. | macOS 10.13 and later |
| Allow Cloud Photo Library | The iCloud Photo Library is allowed on the device. Photographs that are not fully downloaded from the iCloud Photo Library to the device are removed from local storage. | macOS 10.13 and later |
| Allow Finger Print Unlock | The device cannot be unlocked with Touch ID. | macOS 10.12.4 and later |
| Allow macOS cloud desktop and document services | The macOS cloud desktop and document services are allowed on the device. The default value is true. | macOS 10.12.4 and later |
| Allow use of camera | The device can use a camera. | macOS 10.11 and later |
| Allow Auto Unlock | The device can be automatically unlocked at any time. | macOS 10.12 and later |
| Allow Cloud BTMM | The device uses macOS Back to My Mac iCloud services. | macOS 10.12 and later |
| Allow Cloud FMM | The device uses macOS Find My Mac iCloud services. | macOS 10.12 and later |
| Allow Cloud Address Book | The device uses macOS iCloud Address Book services. | macOS 10.12 and later |
| Allow Cloud Mail | The device uses macOS Mail iCloud services. | macOS 10.12 and later |
| Allow Cloud Bookmarks | The device uses macOS iCloud bookmarks. | macOS 10.12 and later |
| Allow Cloud Reminders | The device uses iCloud Reminder services. | macOS 10.12 and later |
| Allow Cloud Calendar | The device uses macOS iCloud Calendar services. | macOS 10.12 and later |
| Allow Cloud Document Sync | The document and key-values on the device are synchronized with iCloud. | macOS 10.12 and later |
| Allow Cloud Keychain Sync | The device uses iCloud keychain synchronization. | macOS 10.12 and later |
| Allow Cloud Notes | The device uses macOS iCloud Notes services. | macOS 10.12 and later |
| Allow Content Caching | The device caches content. | macOS 10.12 and later |
| Allow iTunes File Sharing | The device uses iTunes application file sharing services. | macOS 10.12 and later |
| Allow Definition Lookup | The device looks up definitions. | macOS 10.11.2 and later |
| Allow Spotlight Internet Results | The device uses Spotlight internet search results. | macOS 10.11 and later |
| Configure Delay for Software Updates | The user visibility of software updates is delayed. The seed build updates on macOS devices that are allowed without delay. | macOS 10.13 and later |
| Number of Days to Delay (1-90 days) | The number of days a software update on the device is delayed. The software update is not displayed to users until the specified number of days after the software update release date. The maximum number of days is 90 and the default value is 30. | macOS 10.13.4 |
| Allow Music Service | The device uses the music service. If this setting is disabled, the Music app reverts to classic mode. | macOS 10.12 and later |
| Allow Password Sharing | The device can share passwords with other devices by using the Airdrop passwords feature. | macOS 10.14 and later |
| Allow Password Auto Fill | The device saves passwords in Safari or in apps. | macOS 10.14 and later |
| Allow Password Proximity Requests | The device requests passwords from nearby devices. | macOS 10.14 and later |
| Allow Screenshot | The device allows screen captures and screen recordings. If this setting is disabled, screen captures and screen recordings are restricted on the device. | macOS 10.14.4 and later |
| Allow Erase All Content & Settings | The Erase All Content and Settings option in device is used to erase all settings, media, and data on macOS devices. When this setting is turned off, the Erase All Content And Settings option in the Reset UI is unavailable. The default value is True. | macOS 12 and later |