Restrictions

Profile restrictions allow you to set access for content and apps on your mobile devices managed by Lightspeed Systems Mobile Manager. For example, you can allow or prevent the use of cameras on all mobile devices.

To view, edit, or delete restrictions policies:

  • 1. To view, edit, or delete restrictions policies for the entire organization, navigate to the dashboard home page. To view, edit, or delete restrictions policies for a group or sub group, navigate to that group or sub group.
  • 2. Click Policies.
  • 3. Click Restrictions. The following will be displayed:

Restrictions

 

Field Description OS Supported
Allow use of camera Select this option to allow cameras on mobile devices. On iOS6+ devices this will remove the camera-related apps (Camera, Photo Booth, FaceTime) from the home screen.  iOS6+
Android
Windows 10
Allow screen capture Select this option to allow screen shots on mobile devices  iOS6+
Allow AirPlay and ViewScreen by Classroom Select this option to allow remote screen observation. The Allow screen capture restriction must also be turned on for this to work.  iOS9+
Allow AirPlay and ViewScreen by Classroom without prompting Defaults to False. A student enrolled in a Classroom enabled group will automatically give permission to that course’s teacher to observe the student’s screen.  iOS11+
Allow use of iMessage Select this option to allow iMessage on devices.
Note: This feature is only supported on supervised devices
iOS6+
Supervise
Allow iBook store Select this option to allow iBookstore on iOS devices.
Note: This feature is only supported on supervised devices
iOS6+
Supervise
Allow explicit sexual content in iBook store Select this option to allow purchases of explicit content (including erotica) from the iBookstore on iOS devices.
Note: This feature is only supported on supervised devices
iOS6+
Supervise
Allow Passbook while device is locked Select this option to allow the Passbook on a locked iOS device iOS6+
Allow voice dialing Select this option to allow voice dialing on devices iOS6+
Allow location service  Specifies whether to allow app access to the Location service. Windows 10
Allow Android location reporting Enable to allow location reporting on Android devices. Android
Android location – time interval Allows you to specify how often location is reported. Android
Android location – distance traveled Allows you to set a minimum distance that must be traveled before a report is generated. Android
Bluetooth device name Sets the local Bluetooth device name. Windows 10
Allow bluetooth advertising Specifies whether the device can send out Bluetooth advertisements. Windows 10
Allow bluetooth discovery Specifies whether other Bluetooth-enabled devices can discover the device. Windows 10
Allow bluetooth modification This restriction will lock the devices’ bluetooth state at the time it is applied. Turn bluetooth on/off on the device and then apply this restriction to keep the setting. iOS 10+
Supervise
Allow media auto play Allows the user to change Auto Play settings. Windows 10
Allow manually removing enrollment Specifies whether to allow the runtime configuration agent to remove provisioning packages. Windows 10
Allow storage card  Controls whether the user is allowed to use the storage card for device storage. This setting prevents programmatic access to the storage card. Windows 10
Allow Siri/Cortana Select this option to allow Siri on iOS devices or Cortana on Windows 10 devices. iOS6+
Windows 10
Allow Siri while locked Select this option to allow Siri to be used on iOS devices while they are locked.
Note: This option will be ignored if no passcode has been set.
iOS6+
Enable Siri profanity filter Select this option to enable the Siri profanity filter
(Note: This feature is only supported on supervised devices.)
iOS6+
Supervise
Allow Siri user-generated content Select this option to enable Siri to query user-generated content from the web on devices (including content from Wikipedia, Twitter, and Bing)
(Note: This feature is only supported on supervised devices.)
iOS7+
Supervise
Allow installing apps using Apple Configurator and iTunes Select this option to allow users to use Host apps (iTunes, Configurator) to install or update their apps iOS6+
Allow installing apps using app store Select this option to allow users to install apps from the app store using their own iTunes accounts. iOS9+
Supervise
Allow automatic app downloads Select this option to allow automatic downloading of apps purchased on other devices. Does not affect updates to existing apps. iOS9+
Supervise
Allow removing apps Select this option to allow users to uninstall apps managed by Mobile Manager on their devices
Note: This feature is only supported on supervised devices.
iOS6+
Supervise
Allow removing system apps Defaults to true. When set to false, this disallows the removal of any system app. iOS11+
Supervise
Allow In-App Purchase Select this option to allow users to make in-app purchases iOS6+
Require iTunes password for all purchases Select this option to require an iTunes password for all purchases iOS5+
Allow Game Center Select this option to allow the Apple Game Center on iOS devices
Note: This feature is only supported on supervised devices.
iOS6+
Supervise
Allow iCloud backup Select this option to allow iCloud backups on mobile devices. Please use this with caution since this could involve saving your organization’s data on systems you don’t control. iOS6+
Allow macOS auto unlock Defaults to true. When set to false, this disallows macOS auto unlock. OS X .12
Allow Back to My Mac iCloud service Defaults to true. When set to false, this disallows the Back to My Mac iCloud service. OS X .12
Allow macOS Find My Mac iCloud service Defaults to true. When set to false, this disallows the Find My Mac iCloud service. OS X .12
Allow macOS iCloud Bookmark sync Defaults to true. When set to false, this disallows the iCloud Bookmark sync. OS X .12
Allow macOS Mail iCloud services Defaults to true. When set to false, this disallows iCloud Mail services. OS X .12
Allow macOS iCloud Calendar services Defaults to true. When set to false, this disallows iCloud Calendar services. OS X .12
Allow macOS iCloud Reminder services Defaults to true. When set to false, this disallows iCloud Reminder services. OS X .12
Allow macOS iCloud Address Book services Defaults to true. When set to false, this disallows iCloud Address Book services. OS X .12
Allow macOS iCloud Notes services Defaults to true. When set to false, this disallows iCloud Notes services. OS X .12
Allow macOS iCloud desktop and document services Defaults to true. When set to false, this disallows macOS cloud desktop and document services. (macOS 10.12.4+) OS X .12
Allow iCloud document sync Select this option to allow iCloud document syncing on iOS devices. Please use this with caution since this could involve saving your organization’s documents on systems you don’t control. iOS6+
Allow iCloud keychain sync Select this option to allow iCloud Keychain syncing on iOS devices. Please use this with caution since this could involve saving your organization’s Keychain data on systems you don’t control. iOS7+
Allow iCloud managed apps sync Select this option to allow iCloud managed app syncing on iOS devices. Please use this with caution since this could involve saving your organization’s managed apps on systems you don’t control. iOS8+
Allow iCloud book notes and highlights sync Select this option to allow iCloud book notes and highlights syncing on iOS devices. Please use this with caution since this could involve saving your organization’s book notes and highlights on systems you don’t control. iOS8+
Allow iCloud photo sharing Select this option to allow iCloud photo sharing on iOS devices. Please use this with caution since this could involve saving your organization’s photographs on systems you don’t control. iOS6+
Allow iCloud photo library Select this option to allow iCloud photo library sharing on iOS devices. Please use this with caution since this could involve saving your organization’s photographs on systems you don’t control. iOS9+
Allow Photo Stream Select this option to allow iOS photo stream on iOS devices. Please use this with caution since this could involve saving your organization’s photographs on systems you don’t control.
Note: Disabling Photo Stream can cause data loss.
iOS6+
Allow automatic sync while roaming Select this option to allow automatic syncing on devices. If this option is disabled then devices will only sync when they are accessed by users, which can save on roaming costs. iOS6+
Force encrypted backups Select this option to require force encrypted backups on devices. This can help ensure that backups are protected even if the server that hosts the backups is compromised iOS6+
Backup managed books Select this option to allow encrypted backups of managed books on devices iOS8+
Allow untrusted TLS certificates Select this option to let users accept untrusted TLS certificates. Please note an untrusted certificate could indicate the presence of a “man in the middle” attack.
Note: See Apple’s KB article HT 5012 iOS 8: List of available trusted root certificates for information about the certificate trust policies for iOS
iOS6+
Allow diagnostic setting modification Select this option to allow the modification of diagnostic settings iOS9.3.2+
Send diagnostic and usage data to Apple Select this option to send diagnostic usage data from iOS devices to Apple
Note: Some organizations may consider diagnostics data to be sensitive
iOS6+
Allow installing profiles Select this option to allow the installation of configuration profiles and certificates on devices
(Note: This feature is only supported on supervised devices.)
iOS6+
Supervise
Allow adding VPN configurations Defaults to true. When set to false, this disallows the ability to create VPN configurations. iOS11+
Supervise
Allow account modification Select this option to allow account modifications on devices
(Note: This feature is only supported on supervised devices.)
iOS7+
Supervise
Allow AirDrop Select this option to allow AirDrop on devices
(Note: This feature is only supported on supervised devices.)
iOS7+
Supervise
Allow app cellular data modification Select this option to enable changes to cellular data usage for apps on devices
(Note: This feature is only supported on supervised devices.)
iOS7+
Supervise
Allow find my friends modification Select this option to enable Find My Friends on devices. Please note if you disable this feature you can no longer enable or disable location services.
(Note: This feature is only supported on supervised devices.)
iOS7+
Supervise
Allow finger-print for unlock Select this option to enable Touch ID to unlock devices iOS7+
Allow modifying passcode Select this option to allow users to add, change, or remove device passcodes. iOS9+
Supervise
Allow modifying Touch ID fingerprints Select this option to allow users to add, change, or remove Touch ID fingerprints. iOS8+
Supervise
Allow modifying wallpaper Select this option to allow users to modify the wallpaper on the device. iOS9+
Supervise
Allow modifying device name Select this option to allow users to add, change, or remove the device name. iOS9+
Supervise
Allow keyboard shortcuts Select this option to allow users to use keyboard shortcuts. iOS9+
Supervise
Allow pairing with Apple Watch Select this option to allow users to pair the device with an Apple Watch. iOS9+
Supervise
Force Apple Watch wrist detection Select this option to require a passcode to unlock a paired Apple Watch when it has been removed from the user’s wrist. iOS9+
Allow trusting new enterprise app authors Select this option to allow apps to be installed via MDM without requiring the user to “trust” the app developer. Note that enabling this setting can also allow users to “sideload” potentially unwanted apps. iOS9+
Require passcode when AirPlay pairing Select this option to require a passcode for AirPlay pairing (mirroring)
(Note: This feature is only supported on supervised devices.)
iOS7+
Supervise
Allow request to pair Apple TV with iOS Remote app Select this option to allow the paring of Apple TV with remote apps iOS 10.2+
Supervise
Require all devices pairing to this Apple TV to use a password Select this option to require a passcode for AirPlay pairing (mirroring) with this Apple TV. Apple TV
Allow host pairing Select this option to enable host pairing on devices. Please note if you do not enable this feature pairing with the supervision host will not be affected. In addition, if no supervision host certificate has been configured all pairing will be disabled
(Note: This feature is only supported on supervised devices.)
iOS7+
Supervise
Allow dictation Select this option to enableto use voice to enter text on your device. iOS10+
Supervise
WiFi Whitelisting This restriction allows iOS devices to be restricted into only using WiFi networks configured from the MDM or Apple Configurator. If there are no WiFi networks configured on the device, the restriction is removed from the device and it can then connect to available networks. If the only WiFi profiles on the device are networks that the device cannot reach, the device will have no connection to the internet and will not be receive MDM activities. Due to this, in order to use the restriction, it must first be enabled under Settings > General. If it is not enabled, the WiFi Whitelisting restriction will not be sent to the device. iOS10+
Supervise
Allow lock screen control center Select this option to allow the Control Center to be displayed on the lock screen. You may want to disable this feature if you’re concerned about potentially sensitive data in the Control Center iOS7+
Allow toasts (notifications) Specifies whether to allow toast notifications above the device lock screen. Windows 10
Allow lock screen notifications view Select this option to allow the Notification Center to be displayed on the lock screen. You may want to disable this feature if you’re concerned about potentially sensitive data in Notifications iOS7+
Allow lock screen today view Select this option to allow the Today view in Notification Center to be displayed on the lock screen. You may want to disable this feature if you’re concerned about potentially sensitive data in the Today View iOS7+
Allow opening documents from managed apps in unmanaged apps Select this option to only open documents from managed apps and accounts in other managed apps and accounts iOS7+
Allow opening documents from unmanaged apps in managed apps Select this option to only open documents from unmanaged apps and accounts in managed apps and accounts iOS7+
Treat AirDrop as unmanaged destination Select this option to cause AirDrop to be considered an unmanaged drop target. iOS9+
Allow OTA-PKI updates Select this option to allow over-the-air public key infrastructure (OTA-PKI) updates on devices iOS7+
Force limit Ad tracking Select this option to limit ad tracking on devices iOS7+
Allow YouTube Select this option to allow YouTube on devices iOS5 Only
Allow use of iTunes store Select this option to allow iTunes purchases from the iTunes store. If this option is disabled then the iTunes Store icon will be removed from the device iOS6+
Allow use of Podcasts Select this option to allow podcasts on the device.
Note: This feature is only supported on supervised devices
iOS7+
Supervise
Allow use of the News app Select this option to allow the News app. iOS9+
Supervise
Allow Apple Music Select this option to allow use of the iTunes Music Store. iOS9+
Supervise
Allow radio Select this option to allow use of iTunes Radio. iOS9+
Supervise
Allow AirPrint Defaults to true. When set to false, this disallows AirPrint from being used. iOS911+
Supervise
Allow Discovery of of AirPrint printers using iBeacons Defaults to true. When set to false, this disables iBeacon discovery of AirPrint printers, and can be used to prevent spurious AirPrint Bluetooth beacons from phishing for network traffic. iOS911+
Supervise
Allow storage of AirPrint credentials in Keychain – Defaults to true. When set to false, this disallows Keychain storage of the username and password for AirPrint. iOS911+
Supervise
Allow use of the Safari browser Select this option to allow the use of the Safari browser on iOS devices. If this option is disabled then the Safari icon will be removed from the device and users will not be able to open web clips.
Note: Go to iTunes to learn more about the Lightspeed Systems Mobile Filter iOS app, which is a browser application that regulates and monitors web browsing when used in conjunction with Lightspeed Systems Web Filter for schools.
iOS6+
Enable autofill Select this option to enable auto fill on devices. If a device is lost or stolen autofill data could potentially be accessed iOS6+
Windows 8
Force fraud warning Select this option to force fraud warnings when users visit known fraudulent websites iOS6+
Windows 8
Enable JavaScript Select this option to enable JavaScript on devices
Note: Since JavaScript is very commonly used disabling this feature could make it difficult for users to browse the web
iOS6+
Allow pop-ups Select this option to allow pop-ups on devices iOS6+
Accept cookies Select Never, From visited sites, or Always from the dropdown list to configure the cookie settings on devices iOS6+
Ratings region Select Australia, Canada, France, Germany, Ireland, New Zealand, South Africa, United Kingdom, or United States from the dropdown list to set the country iOS6+
Movies Select the following from the dropdown list to set maximum allowable movie ratings level. The choices vary depending on the ratings region you selected above.
  • United States: Don’t Allow Movies, G, PG, PG-13, R, NC-17, or Allow All Movies
  • United Kingdom: Don’t Allow Movies, U, Uc, PG, 12, 12A, 15, 18, or Allow All Movies
  • Australia: Don’t Allow Movies, G, PG, M, MA15+, R18+, or Allow All Movies
  • Canada: Don’t Allow Movies, G, PG, 14A, 18A, R, or Allow All Movies
  • France: Don’t Allow Movies, -10, -12, -16, -18, or Allow All Movies
  • Germany: Don’t Allow Movies, ab 0 Jahren, ab 6 Jahren, ab 12 Jahren, ab 16 Jahren, ab 18 Jahren, or Allow All Movies
  • Ireland: Don’t Allow Movies, G, PG, 12, 15, 16, 18, or Allow All Movies
  • New Zealand: Don’t Allow Movies, G, PG, M, R13, R15, R16, R18, R, RP6, or Allow All Movies
  • South Africa: Don’t Allow Movies, PG, 10, 13, 16, 18, or Allow All Movies
iOS6+
TV Shows Select the following from the dropdown list to set the maximum allowable ratings level for TV shows. The choices vary depending on the ratings region you selected above.
  • United States: Don’t Allow TV Shows, TV-Y, TV-Y17, TV-G, TV-PG, TV-14, TV-MA, or Allow All TV Shows
  • United Kingdom: Don’t Allow TV Shows, Caution, or Allow All TV Shows
  • Canada: Don’t Allow TV Shows, C, C8, G, PG, 14+, 18+, or Allow All TV Shows
  • France: Don’t Allow TV Shows, -10, -12, -16, -18, or Allow All TV Shows
  • Germany: Don’t Allow TV Shows, ab 0 Jahren, ab 6 Jahren, ab 12 Jahren, ab 16 Jahren, ab 18 Jahren, or Allow All TV Shows
  • Ireland: Don’t Allow TV Shows, G, Ch, YA, PS, MA, or Allow All TV Shows
  • New Zealand: Don’t Allow TV Shows, G, PGR, AO, or Allow All TV Shows
  • South Africa: Don’t Allow TV Shows or Allow All TV Shows
iOS6+
Apps Select Don’t Allow Apps, 4+, 9+, 12+, 17+, or Allow All Apps from the dropdown list to set a maximum allowable rating levels of apps users can download and install iOS6+
Allow explicit content When disabled, explicit music or video content purchased from the iTunes Store is hidden. Explicit content is marked as such by content providers, such as record labels, when sold through the iTunes Store. iOS6+
Allow erase all content and settings Select this option to allow users to erase all contents and settings
Note: This feature is only supported on supervised devices
iOS8+
Supervise
Allow spotlight to return internet results Select this option to allow Internet results in Spotlight
Note: This feature is only supported on supervised devices
iOS8+
Supervise
Allow enabling restrictions Select this option to allow users to enable restrictions
Note: This feature is only supported on supervised devices
iOS8+
Supervise
Allow handoff Select this option to allow handoff on devices iOS8+
Allow use of Dictionary Select this option to allow the built-in iOS dictionary
Note: This feature requires iOS 8.1.3 or higher in supervised mode
iOS8+
Supervise
Allow predictive keyboard Select this option to allow the iOS predictive keyboard (QuickType) feature
Note: This feature requires iOS 8.1.3 or higher
iOS8+
Supervise
Allow auto correction Select this option to allow the iOS autocorrection feature
Note: This feature requires iOS 8.1.3 or higher in supervised mode
iOS8+
Supervise
Allow spell check Select this option to allow the iOS spell check feature
Note: This feature requires iOS 8.1.3 or higher in supervised mode
iOS8+
Supervise
Autonomous single app mode permitted app ids Select this option and then click the plus sign (+) and enter an app identifier (for example, com.apple.mobilesafari) or select an installed app from the dropdown list for an app that will autonomously enter Single App Mode. Use the minus sign (-) to delete an app identifier. iOS7+
Supervise
Internet scripting Select this option to enable Internet scripting. (Disabling Internet scripting can cause problems with Windows validation.) Windows 8.1+
Internet plugins Select this option to enable Internet plugins Windows 8.1+
Internet popups blocked Select this option to block Internet popups Windows 8.1+
Always send Do Not Track header Select this option to always send do not track headers Windows 8.1+
Go to intranet for single word Select this option to use a single word entry as search criteria in OneBox Windows 8.1+
Diagnostics Submission Select this option to enable diagnostics submissions Windows 8.1+
Data Roaming Select this option to enable data roaming Windows 8.1+
Intranet security zone Select this option to enable Internet security zones Windows 8.1+
Internet security zone From the dropdown list select the Internet zone security level, which can be High, Medium-high, or Medium Windows 8.1+
Intranet security zone From the dropdown list select the intranet security zone level, which can be High, Medium-high, Medium, Medium-low, or Low Windows 8.1+
Trusted sites security zone From the dropdown list select the trusted sites security zone, which can be High, Medium-high, Medium, Medium-low, or Low Windows 8.1+
Restricted sites level From the dropdown list select the restricted security level, which can be High, Medium-high, Medium, Medium-low, or Low Windows 8.1+
Is Microsoft Account Optional Select this option to make Microsoft accounts optional to use Microsoft App deployment Program (ADP) apps. Windows 8.1+
Enable Windows Parental Controls. Select this option to enable parental control on devices. EOBO
Windows 8.1+
Logging Enabled Select this option to enable logging on a device. EOBO
Windows 8.1+
Hourly Restrictions Select this option to allow hourly restrictions. EOBO
Windows 8.1+
Override Requests Select this option to enable override requests. EOBO
Windows 8.1+
App Restrictions Select this option to enable app restrictions. EOBO
Windows 8.1+
Allow games Select this option to allow games. EOBO
Windows 8.1+
Allow unrated Games Select this option to allow unrated games. EOBO
Windows 8.1+
Maximum allowed game rating Select the following from the dropdown to select the maximum allowed game rating for the device. The choices vary depending on the ratings region (in the iOS and Apple TV table above) you selected.
  • United States: Early Childhood, Everyone, Everyone 10+, Teen, Mature, or Adults Only
  • United Kingdom: 3+, 7+, 12+, 16+, or 18+
  • Australia: G, PG, M, M15+, or R18+.
  • Canada: Early Childhood, Everyone, Everyone 10+, Teen, Mature, or Adults Only
  • France: 3+, 7+, 12+, 16+, or 18+
  • Germany: Everyone, 6+, 12+, 16+, or No Youth
  • Ireland: 3+, 7+, 12+, 16+, or 18+
  • New Zealand: G, PG, M, R13, R15, R16, or R18
  • South Africa: Children, 13 or older, 16 or older, or 18 or older.
EOBO
Windows 8.1+

Remember: Click the Save button to save any changes you make.