Feature Control (iOS)
For security-conscious organizations and environments where privacy and information security concerns require controlling the unauthorized transfer of mobile data out of the mobile devices, SOTI MobiControl provides various on-device restrictions including the capability to block various device communications, similar to firewall functionality. The Feature Control profile configuration enables you to selectively disable device features. Applying the configuration at the individual or group level allows custom profiles for different users and locations in an organization. For example, disabling or enabling Bluetooth and infrared ports determines if device users can beam business cards, applications or documents to one another.
Device Functionality
| Allow Use of Camera | Allows device users to use the Camera app by displaying it on the Home Screen. Device users can take photos or videos using native or third-party apps, including FaceTime.
Supported on devices running iOS 4.0 or later. As of iOS 13.0, the device must also be supervised. |
| Allow FaceTime | Allows users to perform video conferencing, including making or receiving FaceTime video calls.
Supported on devices running iOS 4.0 or later. As of iOS 13.0, the device must also be supervised. |
| Allow Screen Capture | Controls the ability of applications to capture the device screen. |
| Allow Photo Stream | Allows users to use the photo streaming function. (Requires iOS 5 or later.) |
| Allow Shared Photo Stream | Allows users to view Shared Photo Streams on their device. (Requires iOS 6 or later.) |
| Allow Passbook Notifications While Locked | Allows users to see Passbook notifications on the lock screen. (Requires iOS 6 or later.) |
| Allow Apple Music | Allows users to access Apple Music. (Requires supervision and iOS 9 or later.) |
| Allow Apple Music Radio | Allows users to access Apple Music Radio. (Requires supervision and iOS 9.3 or later.) |
| Allow iMessage | Allows users to send or receive messages through iMessage. (Requires supervision and iOS 6 or later.) |
| Allow Voice Dialing | Allows users to dial their phone using voice commands. |
| Allow Siri | Allows users to use voice commands to control their device. (Requires iOS 5 or later.) |
| Show User Generated Content in Siri | Allows Siri to show user generated content. (Requires supervision and iOS 7 or later.) |
| Allow Siri While Device is Locked | Allows the use of Siri while the device is locked. (Requires iOS 5.1 or later.) |
| Enable Siri Profanity Filter | Creates a filter for profane language. (Requires supervision and iOS 6 or later.) |
| Allow Siri Server Logs | Allows Siri to store server logs. (Requires supervision and iOS 12.2 or later.) |
| Allow iBookstore | Allows users to view and access the iBookstore through the iBooks App. (Requires supervision and iOS 6 or later.) |
| Allow Erotica Content | Allows users to purchase books categorized as erotica from the iBookstore. (Requires supervision and iOS 6 or later.) |
| Allow Installation of Apps | Allows device users to use the App Store by displaying it on the Home Screen. Device users can install or update third-party applications.
Supported on devices running iOS 4.0 or later. As of iOS 13.0, the device must also be supervised. |
| Allow Installation of Apps from App Store Only | Allows users to install or update their applications using the App Store. When disabled, users will still be able to install or update applications using iTunes or Apple Configurator. (Requires supervision on devices running iOS 13 or later.) |
| Allow Automatic App Download | Allows users to automatically download applications purchased on other devices. (Requires supervision and iOS 9 or later.) |
| Allow Trusting New Enterprise App Authors | Allows users to trust enterprise applications. (Supported on devices running iOS 9 or later.) |
| Allow In-App Purchase | Allows users to purchase additional features of an application or an additional app from within an app. |
| Allow AirDrop | Allows users to share files with other Apple devices using AirDrop. (Requires supervision and iOS 7 or later.) |
| Allow AirPrint | Allows users to print documents using AirPrint. (Requires supervision and iOS 11 or later.) |
| Allow Keychain Storage of AirPrint Credentials | Allows users to store the username and password for AirPrint in the keychain. (Requires supervision and iOS 11 or later.) |
| Require TLS for AirPrint | Requires trusted certificates for TLS communication when using AirPrint. (Requires supervision and iOS 11 or later.) |
| Allow iBeacon Discovery for AirPrint | Enables iBeacon discovery of AirPrint printers. When disabled, this prevents spurious AirPrint Bluetooth beacons from phishing for network traffic. (Requires supervision and iOS 11 or later.) |
| Show Control Centre in Lock Screen | Allows users to access Control Centre while on the Lock Screen. (Requires supervision and iOS 7 or later.) |
| Show Notification Centre in Lock Screen | Allows users to access Notification Centre while on the Lock Screen. (Requires supervision and iOS 7 or later.) |
| Show Today View in Lock Screen | Allows users to access the Today View while on the Lock Screen. (Requires supervision and iOS 7 or later.) |
| Allow App Removal | Allows users to remove apps from their device. (Requires supervision.) |
| Allow System App Removal | Allows users to remove system apps from the device. (Requires supervision and iOS 11 or later.) |
| Allow Account Modification | Allows users to make account additions or modification to iCloud, iTunes, Email, Contacts, and Calendars. (Requires supervision and iOS 7 or later.) |
| Allow App Cellular Data Usage Modifications | Allows users to change settings for cellular data usage for apps. (Requires supervision and iOS 7 or later.) |
| Allow Host Pairing | Allows the device to pair with any host computer. (Requires supervision and iOS 7 or later.) |
| Allow Managed to Unmanaged Data Sharing | Allows managed apps to share data with unmanaged apps. (Requires iOS 7 or later.) |
| Allow Managed to Unmanaged Contacts Writing | Allows managed apps to write contacts to unmanaged contacts accounts. This option is available only if Allow Managed to Unmanaged Data Sharing is enabled. (Supported on device enrollment devices running iOS 12 or later.) |
| Allow Unmanaged to Managed Contacts Reading | Allows unmanaged apps to read contacts from managed contacts accounts. This option is available only if Allow Managed to Unmanaged Data Sharing is enabled. (Supported on devices running iOS 12 or later.) |
| Allow Unmanaged to Managed Data Sharing | Allows unmanaged apps to share data with managed apps. (Requires iOS 7 or later.) |
| Allow OTA (Over-the-Air) PKI Updates | Allows devices to obtain public key infrastructure (PKI) updates over the air. (Requires supervision and iOS 7 or later.) |
| Limit Ad Tracking | Prevents apps from using the Advertising Identifier. (Requires supervision and iOS 7 or later.) |
| Allow Erase All Content and Settings | Allows users to use the Erase All Content and Settings option in Reset UI. (Requires supervision and iOS 7 or later.) |
| Require iTunes Password for All Purchases | Requires users to enter their Apple ID password before every purchase from iTunes. Ignores the standard grace period between purchases. (Requires iOS 5 or later.) |
| Allow iCloud Keychain Sync | Allows the synchronization of login credentials between iOS devices associated with an iCloud account.
Supported on devices running iOS 7.0 or later. As of iOS 13.0, the device must also be supervised. |
| Allow Storing Data in iCloud for Managed Apps | Allows users to store data from Managed Applications in iCloud. (Requires supervision and iOS 7 or later.) |
| Allow iCloud Document Syncing | Allows users to store documents in iCloud.
Supported on devices running iOS 5.0 or later. As of iOS 13.0, the device must also be supervised. |
| Allow iCloud Device Backup | Allows the device to automatically back up device data to iCloud.
Supported on devices running iOS 5.0 or later. As of iOS 13.0, the device must also be supervised. |
| Allow iCloud Photo Library | Allows users to use iCloud Photo Library. (Requires iOS 9 or later.) |
| Allow Automatic Sync While Roaming | When disabled, roaming devices will sync only when an account is accessed by the user. |
| Force Encrypted Backups | When enabled, it is not possible to have an unencrypted iOS backup if the device is managed. After enrolling an iOS device, a password will be required for the backup during the next sync. Note: This option should not be used with supervised devices. |
| Automatically Reject Untrusted TLS Certificates | Users will not be prompted to trust certificates that cannot be verified. This setting applies to Safari and to Mail, Contacts and Calendar accounts. |
| Allow Interactive Configuration Profile Installation | Allows users to install additional configuration profiles and certificates manually. (Requires supervision and iOS 6 or later.) |
| Allow Submission of Diagnostic and Usage Data | Allows submission of iOS diagnostic and usage information to Apple. (Requires iOS 6 or later.) |
| Allow Modifying Diagnostic and Usage Data Settings | Allows users to modify the option to submit diagnostic and usage information to Apple in Settings. (Requires supervision and iOS 9.3.2 or later.) |
| Allow Touch ID | Allows users to use Touch ID. (Requires iOS 7 or later.) |
| Allow Passcode Modification | Allows users to add, change, or remove a device's passcode. (Requires supervision and iOS 9 or later.) |
| Allow Touch ID Fingerprints Modification | Allows users to modify Touch ID fingerprints. |
| Allow Apple Watch Pairing | Allows users to pair with an Apple Watch. Any currently paired Apple Watch will be unpaired and erased. (Requires supervision and iOS 9 or later.) |
| Force Apple Watch Wrist Detection | Forces a paired Apple Watch to use Wrist Detection. (Requires iOS 8.2 or later.) |
| Treat AirDrop as Unmanaged | Classifies AirDrop as an unmanaged drop target. (Requires iOS 9 or later.) |
| Allow Handoff | Allows users to use Handoff. |
| Allow Internet Search Results in Spotlight | Allows devices to return internet content in Spotlight search results. (Requires supervision and iOS 8 or later.) |
| Allow Creation of VPN Configurations | Allows users to create VPN configurations. (Requires supervision and iOS 11 or later.) |
| Allow Modifying Bluetooth Settings | Allows users to modify Bluetooth settings in Settings. (Requires supervision and iOS 10 or later.) |
| Allow Modifying Personal Hotspot Settings | Allows users to modify Personal Hotspot settings. (Requires supervision and iOS 12.2 or later.) |
| Allow Modifying Notifications Settings | Allows users to modify Notifications settings in Settings. (Requires supervision and iOS 9.3 or later.) |
| Allow Modifying Restrictions | Allows users to turn on Enable Restrictions in the Restrictions UI in Settings. (Requires supervision.) |
| Allow Modifying Device Name | Allows users to change the device name. (Requires supervision and iOS 9 or later.) |
| Allow Modifying Device Wallpaper | Allows users to change the device wallpaper. (Requires supervision and iOS 9 or later.) |
| Force Passcode on First Airplay Pairing | Forces all devices receiving AirPlay requests from this device to use a pairing password. (Requires iOS 7.1 or later.) |
| Allow Dictation Input | Allows users to use dictation when using the device's keyboard. (Requires supervision and iOS 10.3 or later.) |
| Allow Continuous Path Keyboard | Allows users to use Continuous Path keyboards. (Requires supervision and iOS 13 or later.) |
| Allow Predictive Keyboard | Allows users to use predictive keyboards. (Requires supervision and iOS 8.1.3 or later.) |
| Allow Keyboard Shortcuts | Allows users to use keyboard shortcuts. (Requires supervision and iOS 9 or later.) |
| Allow Auto Correction | Allows users to use keyboard auto-correction. (Requires supervision and iOS 8.1.3 or later.) |
| Allow Spell Check | Allows users to use keyboard spell-check. (Requires supervision and iOS 8.1.3 or later.) |
| Allow Define Lookup | Allows users to use definition lookup. (Requires supervision and iOS 8.1.3 or later.) |
| Allow Remote View by Classroom App | Allows remote screen observation by the Classroom app. (Requires supervision and iOS 9.3 or later.) |
| Automatically Join Classes in Classroom | Allows the teacher to have enrolled students join classes without prompting the students. (Requires supervision and iOS 11 or later.) |
| Require Permission to Leave Classes in Classroom | Forces students enrolled in an unmanaged course via Classroom to request permission from the teacher when attempting to leave the course. (Requires supervision and iOS 11.3 or later.) |
| Bypass App and Device Lock Prompt in Classroom | Allows the teacher to lock apps or an enrolled student's device without prompting the student. (Requires supervision and iOS 11 or later.) |
| Bypass Remote View Prompt in Classroom | If ScreenObservationPermissionModificationAllowed is true in the Education configuration profile, allows the teacher to remotely view an enrolled student's device without prompting the student. (Requires supervision and iOS 11 or later.) |
| Allow Joining Wi-Fi Networks | If disabled, the device can only join Wi-Fi networks that were set up through a configuration profile pushed by MDM or carrier. (Requires supervision and iOS 10.3 or later.) |
| Allow Wi-Fi Modification | Allows the user to modify the Wi-Fi state. (Requires supervision and iOS 13 or later.) |
| Allow USB Restricted Mode | Allows USB restricted mode. (Requires supervision and iOS 11.4.1 or later.) |
| Force Date & Time to be set automatically | Enables the Date & Time 'Set Automatically' feature and prevents the user from disabling it. (Requires supervision and iOS 12 or later.) |
| Allow Password Proximity Requests | Allows devices to request passwords from nearby devices. (Requires supervision and iOS 12 or later.) |
| Allow Password Sharing | Allows users to share their passwords with the Airdrop Passwords feature. (Requires supervision and iOS 12 or later.) |
| Allow Password AutoFill | Allows users to use the AutoFill Passwords feature on iOS. Users will be prompted to use a saved password in Safari or in apps. (Requires supervision and iOS 12 or later.) |
| Allow Modifying Cellular Plan Settings | Allows users to change their cellular plan settings. (Requires supervision and iOS 11 or later.) |
| Allow Modifying eSIM Cellular Plans | Allows users to add or remove a cellular plan on the eSIM on the device. (Requires supervision and iOS 12.1 or later.) |
| Allow Proximity Setup | Allows users to use their devices to set up nearby iOS devices. (Requires supervision and iOS 11 or later.) |
Applications
| Allow YouTube | Allows users to access YouTube. (iOS 5 only.) |
| Allow iTunes Music Store | Allows users to access iTunes Music Store by displaying it on the home screen. Device users can preview, purchase, or download music, movies, TV shows, or ringtones.
Supported on devices running iOS 4.0 or later. As of iOS 13.0, the device must also be supervised. |
| Allow Find My Device | Allows users to use Find My Device in the Find My app. (Requires supervision and iOS 13 or later.) |
| Allow Find My Friends | Allows users to use Find My Friends in the Find My app. (Requires supervision and iOS 13 or later.) |
| Allow Find My Friends App Modification | Allows users to make changes within the Find My Friends app.
Supported on supervised devices running iOS 7.0 or later. In iOS 13.0 and later, this option allows the user to make changes within the Find My app. |
| Allow Game Center | If disabled, removes the Game Center app from the device home screen. (Requires supervision and iOS 6 or later.) |
| Allow Addition of Game Center Friends | Allows users to add friends to Game Center.
Supported on devices running iOS 4.2.1 or later. As of iOS 13.0, the device must also be supervised. |
| Allow Multiplayer Gaming | Allows users to play multiplayer games in Game Center.
Supported on devices running iOS 4.1 or later. As of iOS 13.0, the device must also be supervised. |
| Allow Safari | Allows users to access Safari from the home screen. Device users can use the Safari app to browse the web or open web clips.
Supported on devices running iOS 4.0 or later. As of iOS 13.0, the device must also be supervised. |
| Allow Autofill | Allows the browser to use autofill to complete forms displayed on websites.
Supported on devices running iOS 4.0 or later. As of iOS 13.0, the device must also be supervised. |
| Force Fraud Warning | Forces Safari fraud warning. |
| Allow JavaScript | Allows the browser to run JavaScript. |
| Prevent Pop-ups | Prevents the browser from opening pop-ups. |
| Accept Cookies | Select whether the browser rejects all cookies, accepts all cookies, or accepts cookies from visited sites only. |
| Allow News | Allows users to use the News app. (Requires supervision and iOS 9 or later.) |
| Allow Podcast | Allows users to use podcasts. (Requires supervision and iOS 8 or later.) |
| Delay Software and OS Update Availability By | Specify the number of days between when a software or OS update becomes available and when it appears to the device user. (Requires supervision and iOS 11.3 or later.) |
| Single App Mode Whitelist | Allows an app to lock itself to the device screen until conditions specified on the app are met. Note that administrators must configure Single App mode behavior for the app outside of SOTI MobiControl. This feature control setting only allows the single app mode to occur, it does not implement it.
Click the + button to add applications to the Single App Mode Whitelist. Visit SOTI Central: How to enable autonomous single app mode for guidance on how to whitelist apps in SOTI MobiControl and Apple Developer Documentation: UIAccessibilityRequestGuidedAccessSession for information on how to set up Single App mode. Note: The Single App Mode configuration supersedes the Feature Control setting if both are assigned to the same device.
|
Media Content
| Movies | Sets the maximum rating for movies to:
|
| TV Shows | Sets the maximum rating for TV shows to:
|
| Apps | Sets the maximum rating for apps to:
|
| Allow Explicit Music & Podcasts | Allows users to download music or podcasts containing explicit content. |
Note: Certain processes and applications are critical and necessary for stable device operation and normal execution of the SOTI MobiControl device agent. These processes are automatically protected through a built-in "permanent whitelist" and cannot be put on a blacklist. Applications that are included in a lockdown program menu are automatically on a whitelist and cannot be put on a blacklist.