Feature Control (iOS)

For security-conscious organizations and environments where privacy and information security concerns require controlling the unauthorized transfer of mobile data from mobile devices, SOTI MobiControl provides diverse on-device restrictions. Restrictions include the capability to block various device communications, similar to firewall functionality. Configure feature control when:

With the Feature Control profile configuration, you may turn off device features selectively. Applying the configuration at the individual or group level creates custom profiles for different users and locations in an organization. For example, turning Bluetooth and infrared ports on or off determines if device users can beam business cards, applications, or documents to one another.

Device Functionality


Allow Use of Camera	Users can activate the Camera app from the Home Screen. Device users can take photos or videos using native or third-party apps, including FaceTime. (Requires iOS 4.0 or later. Supervised for iOS 13.0 and later)
Allow FaceTime	Users can perform video conferencing, including making or receiving FaceTime video calls. (Requires iOS 4.0 or later. Supervised for iOS 13.0 and later)
Allow Screen Capture	Controls the ability of applications to capture the device screen.
Allow Photo Stream	Users can use the photo streaming function. (Requires iOS 5 or later)
Allow Shared Photo Stream	Users can view Shared Photo Streams on their device. (Requires iOS 6 or later)
Allow Passbook Notifications While Locked	Users can see Passbook notifications on the lock screen. (Requires iOS 6 or later)
Allow Apple Music	Users can access Apple Music. (Requires supervision and iOS 9 or later)
Allow Apple Music Radio	Users can access Apple Music Radio. (Requires supervision and iOS 9.3 or later)
Allow iMessage	Users can send or receive messages through iMessage. (Requires supervision and iOS 6 or later)
Allow Voice Dialing	Users can dial their phones using voice commands.
Allow Siri	Users can use voice commands to control their device. (Requires iOS 5 or later)
Show User Generated Content in Siri	Siri can show user-generated content. (Requires supervision and iOS 7 or later)
Allow Siri While Device is Locked	Users can access Siri on a locked device. (Requires iOS 5.1 or later)
Enable Siri Profanity Filter	Creates a filter for profane language. (Requires supervision and iOS 6 or later)
Allow Siri Server Logs	Siri can store server logs. (Requires supervision and iOS 12.2 or later)
Allow iBookstore	Users can view and access the iBookstore through the iBooks App. (Requires supervision and iOS 6 or later)
Allow Erotica Content	Users can purchase books categorized as erotica from the iBookstore. (Requires supervision and iOS 6 or later)
Allow Installation of Apps	Users can use the App Store from the Home Screen. Device users can install or update third-party applications. (Requires iOS 4.0 or later. Supervised for iOS 13.0 and later)
Allow Installation of Apps from App Store Only	Users can install or update their applications using the App Store. When turned off, users can continue to install or update applications using iTunes or Apple Configurator. (Requires supervision and iOS 9 or later)
Allow Automatic App Download	Users can download applications purchased on other devices. (Requires supervision and iOS 9 or later)
Allow Trusting New Enterprise App Authors	Users can trust enterprise applications. (Requires supervision and iOS 9 or later)
Allow In-App Purchase	Users can purchase features or apps from within an app.
Allow AirDrop	Users can share files with other Apple devices using AirDrop. (Requires supervision and iOS 7 or later)
Allow AirPrint	Users can print documents using AirPrint. (Requires supervision and iOS 11 or later)
Allow Keychain Storage of AirPrint Credentials	Users can store the username and password for AirPrint in the keychain. (Requires supervision and iOS 11 or later)
Require TLS for AirPrint	Requires trusted certificates for TLS communication when using AirPrint. (Requires supervision and iOS 11 or later)
Allow iBeacon Discovery for AirPrint	Enables iBeacon discovery of AirPrint printers. (Requires supervision and iOS 11 or later) Note: If turned off, it prevents false AirPrint Bluetooth beacons from phishing for network traffic.
Show Control Centre in Lock Screen	Users can access Control Centre while on the Lock Screen. (Requires supervision and iOS 7 or later)
Show Notification Centre in Lock Screen	Users can access Notification Centre while on the Lock Screen. (Requires supervision and iOS 7 or later)
Show Today View in Lock Screen	Users can access the Today View while on the Lock Screen. (Requires supervision and iOS 7 or later)
Allow App Removal	Users can remove apps from their device. (Requires supervision.)
Allow System App Removal	Users can remove system apps from the device. (Requires supervision and iOS 11 or later)
Allow Account Modification	Users can add or change accounts for iCloud, iTunes, Email, Contacts, and Calendars. (Requires supervision and iOS 7 or later)
Allow App Cellular Data Usage Modifications	Users can change settings for cellular data usage for apps. (Requires supervision and iOS 7 or later)
Allow Host Pairing	The device can pair with any host computer. (Requires supervision and iOS 7 or later)
Allow Managed to Unmanaged Data Sharing	Managed apps can share data with unmanaged apps. (Requires iOS 7 or later)
Allow Managed to Unmanaged Contacts Writing	Managed apps can write contacts to unmanaged contacts accounts. (Requires supervision and iOS 12 or later) Note: You must turn on Allow Managed to Unmanaged Data Sharing to make this option available.
Allow Unmanaged to Managed Contacts Reading	Unmanaged apps can read contacts from managed contacts accounts. (Requires supervision and iOS 12 or later) Note: You must turn on Allow Managed to Unmanaged Data Sharing to make this option available.
Allow Unmanaged to Managed Data Sharing	Unmanaged apps can share data with managed apps. (Requires iOS 7 or later)
Allow OTA (Over-the-Air) PKI Updates	Devices can obtain public key infrastructure (PKI) updates over the air. (Requires supervision and iOS 7 or later)
Limit Ad Tracking	Prevents apps from using the Advertising Identifier. (Requires supervision and iOS 7 or later)
Allow Apple Personalized Advertising	Permits Apple personalized advertising. (Requires iOS 14 or later) Note: If turned off, limits Apple personalized advertising.
Allow Erase All Content and Settings	Users can use the Erase All Content and Settings option in Reset UI. (Requires supervision and iOS 7 or later)
Require iTunes Password for All Purchases	Users must enter their Apple ID password before every purchase from iTunes. Ignores the standard grace period between purchases. (Requires iOS 5 or later)
Allow iCloud Keychain Sync	Login credentials can synchronize with iOS devices associated with an iCloud account. (Requires iOS 7.0 or later. iOS 13.0 and later require supervision.)
Allow Storing Data in iCloud for Managed Apps	Users can store data from Managed Applications in iCloud. (Requires supervision and iOS 7 or later)
Allow iCloud Document Syncing	Users can store documents in iCloud. (Requires iOS 5.0 or later. iOS 13.0 and later require supervision.)
Allow iCloud Device Backup	The device can automatically back up its data to iCloud. (Requires iOS 5.0 or later. iOS 13.0 and later require supervision.)
Allow iCloud Photo Library	Users can use iCloud Photo Library. (Requires iOS 9 or later)
Allow Automatic Sync While Roaming	Devices can sync automatically while roaming. Note: If turned off, roaming devices sync only when the user accesses an account.
Force Encrypted Backups	Managed devices encrypt their iOS backup. Newly enrolled iOS devices require a password for the backup at the next sync. Note: Do not use this option with supervised devices.
Automatically Reject Untrusted TLS Certificates	There are no prompts to trust unverifiable certificates. This setting applies to Safari, Mail, Contacts, and Calendar accounts.
Allow Interactive Configuration Profile Installation	Users can install configuration profiles and certificates manually. (Requires supervision and iOS 6 or later)
Allow Submission of Diagnostic and Usage Data	Users can send iOS diagnostic and usage information to Apple. (Requires iOS 6 or later)
Allow Modifying Diagnostic and Usage Data Settings	Users can change the option to submit diagnostic and usage information to Apple in Settings. (Requires supervision and iOS 9.3.2 or later)
Allow Touch ID	Users can use Touch ID. (Requires iOS 7 or later)
Allow Passcode Modification	Users can add, change, or remove a device's passcode. (Requires supervision and iOS 9 or later)
Allow Touch ID Fingerprints Modification	Users can change Touch ID fingerprints.
Allow Apple Watch Pairing	Users can pair their devices with an Apple Watch. Any currently paired Apple Watch unpairs and erases. (Requires supervision and iOS 9 or later)
Force Apple Watch Wrist Detection	A paired Apple Watch must use Wrist Detection. (Requires iOS 8.2 or later)
Treat AirDrop as Unmanaged	Classifies AirDrop as an unmanaged drop target. (Requires iOS 9 or later)
Allow Handoff	Users can use Handoff.
Allow Internet Search Results in Spotlight	Devices can return internet content in Spotlight search results. (Requires supervision and iOS 8 or later)
Allow Creation of VPN Configurations	Users can create VPN configurations. (Requires supervision and iOS 11 or later)
Allow Modifying Bluetooth Settings	Users can change Bluetooth settings in Settings. (Requires supervision and iOS 10 or later)
Allow Modifying Personal Hotspot Settings	Users can change Personal Hotspot settings. (Requires supervision and iOS 12.2 or later)
Allow Modifying Notifications Settings	Users can change Notifications settings in Settings. (Requires supervision and iOS 9.3 or later)
Allow Modifying Restrictions	Users can turn on Enable Restrictions in the Restrictions UI in Settings. (Requires supervision.)
Allow Modifying Device Name	Users can change the device name. (Requires supervision and iOS 9 or later)
Allow Modifying Device Wallpaper	Users can change the device wallpaper. (Requires supervision and iOS 9 or later)
Force Passcode on First Airplay Pairing	Devices receiving AirPlay requests from this device must use a pairing password. (Requires iOS 7.1 or later)
Allow Dictation Input	Users can use dictation when using the device's keyboard. (Requires supervision and iOS 10.3 or later)
Allow Continuous Path Keyboard	Users can use Continuous Path keyboards. (Requires supervision and iOS 13 or later)
Allow Predictive Keyboard	Users can use predictive keyboards. (Requires supervision and iOS 8.1.3 or later)
Allow Keyboard Shortcuts	Users can use keyboard shortcuts. (Requires supervision and iOS 9 or later)
Allow Auto Correction	Users can use keyboard auto-correction. (Requires supervision and iOS 8.1.3 or later)
Allow Spell Check	Users can use keyboard spell-check. (Requires supervision and iOS 8.1.3 or later)
Allow Define Lookup	Users can use definition lookup. (Requires supervision and iOS 8.1.3 or later)
Allow Remote View by Classroom App	The Classroom app can use remote screen observation. (Requires supervision and iOS 9.3 or later)
Automatically Join Classes in Classroom	The teacher can let enrolled students join classes without prompting. (Requires supervision and iOS 11 or later)
Require Permission to Leave Classes in Classroom	Students enrolled in an unmanaged course via Classroom must request permission from the teacher before leaving the course. (Requires supervision and iOS 11.3 or later)
Bypass App and Device Lock Prompt in Classroom	The teacher can lock apps or an enrolled student's device without prompting. (Requires supervision and iOS 11 or later)
Bypass Remote View Prompt in Classroom	The teacher can remotely view an enrolled student's device without prompting. (Requires supervision and iOS 11 or later) Note: Requires the ScreenObservationPermissionModificationAllowed is true in the Education configuration profile.
Allow Joining Wi-Fi Networks	The device can join Wi-Fi networks. (Requires supervision and iOS 10.3 or later) Note: If turned off, the device can only join Wi-Fi networks from a configuration profile pushed by the MDM or carrier.
Allow Wi-Fi Modification	The user can change the Wi-Fi state. (Requires supervision and iOS 13 or later)
Allow USB Restricted Mode	Connections to USB accessories become disabled when the device locks. (Requires supervision and iOS 11.4.1 or later)
Force Date & Time to be set automatically	Enables the Date & Time 'Set Automatically' feature and prevents the user from turning it off. (Requires supervision and iOS 12 or later)
Allow Password Proximity Requests	Devices can request passwords from nearby devices. (Requires supervision and iOS 12 or later)
Allow Password Sharing	Users can share their passwords with the Airdrop Passwords feature. (Requires supervision and iOS 12 or later)
Allow Password AutoFill	Users can use the AutoFill Passwords feature on iOS. Safari and apps prompt users to use a saved password. (Requires supervision and iOS 12 or later)
Allow Modifying Cellular Plan Settings	Users can change their cellular plan settings. (Requires supervision and iOS 11 or later)
Allow Modifying eSIM Cellular Plans	Users can add or remove a cellular plan on the device's eSIM. (Requires supervision and iOS 12.1 or later)
Allow Proximity Setup	Users can use their devices to set up nearby iOS devices. (Requires supervision and iOS 11 or later)
Allow Rapid Security Response Installation	If disabled, prevents Rapid Security Response Installation.
Allow Rapid Security Response Removal	If disabled, prevents Rapid Security Response Removal.
Allow Mail Privacy Protection	Allow users to hide their IP address from senders. Remote content is privately downloaded in the background when they receive a message instead of when they view it. (Requires iOS 15.2 or later)
Allow iCloud Private Relay	If disabled, disables iCloud Private Relay. (Requires supervision and iOS 15 or later)

Applications


Allow YouTube	Users can access YouTube. (iOS 5 only.)
Allow iTunes Music Store	Users can access iTunes Music Store from the home screen. Device users can preview, purchase, or download music, movies, TV shows, or ringtones. (Requires iOS 4.0 or later. OS 13.0 and later require supervision.)
Allow Find My Device	Users can use Find My Device in the Find My app. (Requires supervision and iOS 13 or later)
Allow Find My Friends	Users can use Find My Friends in the Find My app. (Requires supervision and iOS 13 or later)
Allow Find My Friends App Modification	Users can make changes within the Find My Friends app. (Requires supervision and iOS 7.0 or later.) Note: In iOS 13.0 and later, the user can make changes within the Find My app.
Allow Game Center	Users can use the Game Center app. (Requires supervision and iOS 6 or later) Note: If turned off, the Game Center app deletes from the home screen.
Allow Addition of Game Center Friends	Users can add friends to Game Center. (Requires iOS 4.2.1 or later. OS 13.0 and later require supervision.)
Allow Multiplayer Gaming	Users can play multiplayer games in Game Center. (Requires iOS 4.1 or later. OS 13.0 and later require supervision.)
Allow Safari	Users can access Safari from the home screen. Device users can use the Safari app to browse the web or open web clips. (Requires iOS 4.0 or later. OS 13.0 and later require supervision.)
Allow Autofill	The browser can use autofill to complete forms displayed on websites. (Requires iOS 4.0 or later. OS 13.0 and later require supervision.)
Force Fraud Warning	Safari warns users about potential fraud on a site.
Allow JavaScript	The browser can run JavaScript.
Prevent Pop-ups	The browser cannot open pop-ups.
Accept Cookies	Select whether the browser rejects all cookies, accepts all cookies, or accepts cookies from visited sites only.
Allow News	Users can use the News app. (Requires supervision and iOS 9 or later)
Allow Podcast	Users can use podcasts. (Requires supervision and iOS 8 or later)
Allow App Clips	Users can add App Clips. (Requires supervision and iOS 14 or later) Note: If turned off, any existing App Clips delete from the device.
Allow Files Access to USB Drive	Users can connect to any connected USB devices in the Files app. (Requires iOS 13.0 or later)
Allow Files Access to Network Drive	Users can connect to any network drives in the Files app. (Requires iOS 13.0 or later)
Delay Software and OS Update Availability By	Specify the number of days between when a software or OS update becomes available and when it appears to the device user. (Requires supervision and iOS 11.3 or later)
Single App Mode Whitelist	An app can lock to the device screen until conditions specified on the app are met. Note: Administrators must configure Single App mode behavior for the app outside of SOTI MobiControl. Note: This setting permits the single app mode but does not implement it. Select the + button to add applications to the Single App Mode Whitelist. Visit: SOTI Central: How to enable autonomous single app mode for guidance on safelisting apps in SOTI MobiControl Apple Developer Documentation: UIAccessibilityRequestGuidedAccessSession for information on setting up Single App mode Note: The Single App Mode configuration overrides the Feature Control setting if both refer to the same device.

Media Content


Movies	Set the maximum rating for movies to: Don't Allow Movies G PG PG-13 R NC-17 Allow All Movies
TV Shows	Set the maximum rating for TV shows to: Don't Allow TV Shows TV-Y TV-Y7 TV-G TV-PG TV-14 TV-MA Allow All TV Shows
Apps	Set the maximum rating for apps to: Don't Allow Apps Important: All App Store applications remove from the device. The user can still view the App Store's content but cannot download or install applications. All Enterprise Apps remain available to the user. 4+ 9+ 12+ 17+ Allow All Apps
Allow Explicit Music & Podcasts	Users can download music or podcasts containing explicit content.

Note: Certain processes and applications are critical and necessary for the proper operation of the device and the SOTI MobiControl agent. These processes are automatically protected through a built-in "permanent whitelist" and cannot be blacklisted. Applications in a lockdown program menu are whitelisted and cannot be blacklisted.