Feature Control (iOS)

For security-conscious organizations and environments where privacy and information security concerns require controlling the unauthorized transfer of mobile data from mobile devices, SOTI MobiControl provides diverse on-device restrictions. Restrictions include the capability to block various device communications, similar to firewall functionality. Configure feature control when:

With the Feature Control profile configuration, you may selectively turn off device features. Applying the configuration at the individual or group level creates custom profiles for different users and locations in an organization. For example, turning Bluetooth and infrared ports on or off determines if device users can beam business cards, applications, or documents to one another.

Device Functionality

Allow Use of Camera Users can activate the Camera app from the Home Screen. Device users can take photos or videos using native or third-party apps, including FaceTime. (Requires iOS 4.0 or later. Supervised for iOS 13.0 and later)
Allow FaceTime Users can perform video conferencing, including making or receiving FaceTime video calls. (Requires iOS 4.0 or later. Supervised for iOS 13.0 and later)
Allow Screen Capture Controls the ability of applications to capture the device screen.
Allow Photo Stream Users can use the photo streaming function. (Requires iOS 5 or later)
Allow Shared Photo Stream Users can view Shared Photo Streams on their devices. (Requires iOS 6 or later)
Allow Passbook Notifications While Locked Users can see Passbook notifications on the lock screen. (Requires iOS 6 or later)
Allow Apple Music Users can access Apple Music. (Requires supervision and iOS 9 or later)
Allow Apple Music Radio Users can access Apple Music Radio. (Requires supervision and iOS 9.3 or later)
Allow iMessage Users can send or receive messages through iMessage. (Requires supervision and iOS 6 or later)
Allow Voice Dialing Users can dial their phones using voice commands.
Allow Siri Users can use voice commands to control their devices. (Requires iOS 5 or later)
Show User Generated Content in Siri Siri can show user-generated content. (Requires supervision and iOS 7 or later)
Allow Siri While Device is Locked Users can access Siri on a locked device. (Requires iOS 5.1 or later)
Enable Siri Profanity Filter Creates a filter for profane language. (Requires supervision and iOS 6 or later)
Allow Siri Server Logs Siri can store server logs. (Requires supervision and iOS 12.2 or later)
Allow iBookstore Users can view and access the iBookstore through the iBooks App. (Requires supervision and iOS 6 or later)
Allow Erotica Content Users can buy books categorized as erotica from the iBookstore. (Requires supervision and iOS 6 or later)
Allow Installation of Apps Users can use the App Store from the Home Screen. Device users can install or update third-party applications. (Requires iOS 4.0 or later. Supervised for iOS 13.0 and later)
Allow Installation of Apps from App Store Only Users can install or update their applications using the App Store. When turned off, users can continue to install or update applications using iTunes or Apple Configurator. (Requires supervision and iOS 9 or later)
Allow Automatic App Download Users can download applications purchased on other devices. (Requires supervision and iOS 9 or later)
Allow Trusting New Enterprise App Authors Users can trust enterprise applications. (Requires supervision and iOS 9 or later)
Allow In-App Purchase Users can buy features or apps from within an app.
Allow AirDrop Users can share files with other Apple devices using AirDrop. (Requires supervision and iOS 7 or later)
Allow AirPrint Users can print documents using AirPrint. (Requires supervision and iOS 11 or later)
Allow Keychain Storage of AirPrint Credentials Users can store the username and password for AirPrint in the keychain. (Requires supervision and iOS 11 or later)
Require TLS for AirPrint Requires trusted certificates for TLS communication when using AirPrint. (Requires supervision and iOS 11 or later)
Allow iBeacon Discovery for AirPrint Enables iBeacon discovery of AirPrint printers. (Requires supervision and iOS 11 or later)
Note: If turned off, it prevents false AirPrint Bluetooth beacons from phishing for network traffic.
Show Control Centre in Lock Screen Users can access the Control Centre while on the Lock Screen. (Requires supervision and iOS 7 or later)
Show Notification Centre in Lock Screen Users can access Notification Centre while on the Lock Screen. (Requires supervision and iOS 7 or later)
Show Today View in Lock Screen Users can access the Today View while on the Lock Screen. (Requires supervision and iOS 7 or later)
Allow App Removal Users can remove apps from their device. (Requires supervision.)
Allow System App Removal Users can remove system apps from the device. (Requires supervision and iOS 11 or later)
Allow Account Modification Users can add or change accounts for iCloud, iTunes, Email, Contacts, and Calendars. (Requires supervision and iOS 7 or later)
Allow App Cellular Data Usage Modifications Users can change settings for app cellular data usage. (Requires supervision and iOS 7 or later)
Allow Host Pairing The device can pair with any host computer. (Requires supervision and iOS 7 or later)
Allow Managed to Unmanaged Data Sharing Managed apps can share data with unmanaged apps. (Requires iOS 7 or later)
Allow Managed to Unmanaged Contacts Writing Managed apps can write contacts to unmanaged contacts accounts. (Requires supervision and iOS 12 or later)
Note: You must turn on Allow Managed to Unmanaged Data Sharing to make this option available.
Allow Unmanaged to Managed Contacts Reading Unmanaged apps can read contacts from managed contacts accounts. (Requires supervision and iOS 12 or later)
Note: You must turn on Allow Managed to Unmanaged Data Sharing to make this option available.
Allow Unmanaged to Managed Data Sharing Unmanaged apps can share data with managed apps. (Requires iOS 7 or later)
Allow OTA (Over-the-Air) PKI Updates Devices can obtain public key infrastructure (PKI) updates over the air. (Requires supervision and iOS 7 or later)
Limit Ad Tracking Prevents apps from using the Advertising Identifier. (Requires supervision and iOS 7 or later)
Allow Apple Personalized Advertising Permits Apple personalized advertising. (Requires iOS 14 or later)
Note: If turned off, it limits Apple personalized advertising.
Allow Erase All Content and Settings Users can use the Erase All Content and Settings option in Reset UI. (Requires supervision and iOS 7 or later)
Require iTunes Password for All Purchases Users must enter their Apple ID password before making any purchases from iTunes. Ignores the standard grace period between purchases. (Requires iOS 5 or later)
Allow iCloud Keychain Sync Login credentials can synchronize with iOS devices associated with an iCloud account.

(Requires iOS 7.0 or later. iOS 13.0 and later require supervision.)
Allow Storing Data in iCloud for Managed Apps Users can store data from Managed Applications in iCloud. (Requires supervision and iOS 7 or later)
Allow iCloud Document Syncing Users can store documents in iCloud. (Requires iOS 5.0 or later. iOS 13.0 and later require supervision.)
Allow iCloud Device Backup The device can automatically back up its data to iCloud. (Requires iOS 5.0 or later. iOS 13.0 and later require supervision.)
Allow iCloud Photo Library Users can use iCloud Photo Library. (Requires iOS 9 or later)
Allow Automatic Sync While Roaming

Devices can sync automatically while roaming.

Note: If turned off, roaming devices sync only when the user accesses an account.
Force Encrypted Backups Managed devices encrypt their iOS backup. Newly enrolled iOS devices require a password for a backup at the next sync.
Note: Do not use this option with supervised devices.
Automatically Reject Untrusted TLS Certificates There are no prompts to trust unverifiable certificates. This setting applies to Safari, Mail, Contacts, and Calendar accounts.
Allow Interactive Configuration Profile Installation Users can install configuration profiles and certificates manually. (Requires supervision and iOS 6 or later)
Allow Submission of Diagnostic and Usage Data Users can send iOS diagnostic and usage information to Apple. (Requires iOS 6 or later)
Allow Modifying Diagnostic and Usage Data Settings Users can change the option to submit diagnostic and usage information to Apple in Settings. (Requires supervision and iOS 9.3.2 or later)
Allow Touch ID Users can use Touch ID. (Requires iOS 7 or later)
Allow Passcode Modification Users can add, change, or remove a device's passcode. (Requires supervision and iOS 9 or later)
Allow Touch ID Fingerprints Modification Users can change Touch ID fingerprints.
Allow Apple Watch Pairing Users can pair their devices with an Apple Watch. Any currently paired Apple Watch unpairs and erases. (Requires supervision and iOS 9 or later)
Force Apple Watch Wrist Detection A paired Apple Watch must use Wrist Detection. (Requires iOS 8.2 or later)
Treat AirDrop as Unmanaged Classifies AirDrop as an unmanaged drop target. (Requires iOS 9 or later)
Allow Handoff Users can use Handoff.
Allow Internet Search Results in Spotlight Devices can return internet content in Spotlight search results. (Requires supervision and iOS 8 or later)
Allow Creation of VPN Configurations Users can create VPN configurations. (Requires supervision and iOS 11 or later)
Allow Modifying Bluetooth Settings Users can change Bluetooth settings in Settings. (Requires supervision and iOS 10 or later)
Allow Modifying Personal Hotspot Settings Users can change Personal Hotspot settings. (Requires supervision and iOS 12.2 or later)
Allow Modifying Notifications Settings Users can change Notification settings in Settings. (Requires supervision and iOS 9.3 or later)
Allow Modifying Restrictions Users can turn on Enable Restrictions in the Restrictions UI in Settings. (Requires supervision.)
Allow Modifying Device Name Users can change the device name. (Requires supervision and iOS 9 or later)
Allow Modifying Device Wallpaper Users can change the device wallpaper. (Requires supervision and iOS 9 or later)
Force Passcode on First Airplay Pairing Devices receiving AirPlay requests from this device must use a pairing password. (Requires iOS 7.1 or later)
Allow Dictation Input Users can use dictation when using the device's keyboard. (Requires supervision and iOS 10.3 or later)
Allow Continuous Path Keyboard Users can use Continuous Path keyboards. (Requires supervision and iOS 13 or later)
Allow Predictive Keyboard Users can use predictive keyboards. (Requires supervision and iOS 8.1.3 or later)
Allow Keyboard Shortcuts Users can use keyboard shortcuts. (Requires supervision and iOS 9 or later)
Allow Auto Correction Users can use keyboard auto correction. (Requires supervision and iOS 8.1.3 or later)
Allow Spell Check Users can use keyboard spell-check. (Requires supervision and iOS 8.1.3 or later)
Allow Define Lookup Users can use definition lookup. (Requires supervision and iOS 8.1.3 or later)
Allow Remote View by Classroom App The Classroom app can use remote screen observation. (Requires supervision and iOS 9.3 or later)
Automatically Join Classes in Classroom The teacher can let enrolled students join classes without prompting. (Requires supervision and iOS 11 or later)
Require Permission to Leave Classes in Classroom Students enrolled in an unmanaged course via Classroom must request permission from the teacher before leaving the course. (Requires supervision and iOS 11.3 or later)
Bypass App and Device Lock Prompt in Classroom The teacher can lock apps or an enrolled student's device without prompting. (Requires supervision and iOS 11 or later)
Bypass Remote View Prompt in Classroom The teacher can remotely view an enrolled student's device without prompting. (Requires supervision and iOS 11 or later)
Note: This requires the ScreenObservationPermissionModificationAllowed to be true in the Education configuration profile.
Allow Joining Wi-Fi Networks

The device can join Wi-Fi networks. (Requires supervision and iOS 10.3 or later)

Note: If turned off, the device can only join Wi-Fi networks from a configuration profile pushed by the MDM or carrier.
Allow Wi-Fi Modification The user can change the Wi-Fi state. (Requires supervision and iOS 13 or later)
Allow USB Restricted Mode When the device locks, it restricts connections to USB accessories. (Requires supervision and iOS 11.4.1 or later)
Force Date & Time to be set automatically Enables the Date & Time Set Automatically feature and prevents the user from turning it off. (Requires supervision and iOS 12 or later)
Allow Password Proximity Requests Devices can request passwords from nearby devices. (Requires supervision and iOS 12 or later)
Allow Password Sharing Users can share their passwords with the Airdrop Passwords feature. (Requires supervision and iOS 12 or later)
Allow Password AutoFill Users can use the AutoFill Passwords feature on iOS. Safari and apps prompt users to use a saved password. (Requires supervision and iOS 12 or later)
Allow Modifying Cellular Plan Settings Users can change their cellular plan settings. (Requires supervision and iOS 11 or later)
Allow Modifying eSIM Cellular Plans Users can add or remove a cellular plan on the device's eSIM. (Requires supervision and iOS 12.1 or later)
Allow Proximity Setup Users can use their devices to set up nearby iOS devices. (Requires supervision and iOS 11 or later)

Allow Rapid Security Response Installation

 If disabled, prevents Rapid Security Response Installation.

Allow Rapid Security Response Removal

 If disabled, prevents Rapid Security Response Removal.

Allow Mail Privacy Protection

 Enables users to hide their IP address from senders. Remote content is privately downloaded in the background when they receive a message instead of when they view it. (Requires iOS 15.2 or later)

Allow iCloud Private Relay

 If disabled, disables iCloud Private Relay. (Requires supervision and iOS 15 or later)

Applications

Allow YouTube Users can access YouTube. (iOS 5 only.)
Allow iTunes Music Store Users can access iTunes Music Store from the home screen. Device users can preview, buy, or download music, movies, TV shows, or ringtones. (Requires iOS 4.0 or later. OS 13.0 and later require supervision.)
Allow Find My Device Users can use Find My Device in the Find My app. (Requires supervision and iOS 13 or later)
Allow Find My Friends Users can use Find My Friends in the Find My app. (Requires supervision and iOS 13 or later)
Allow Find My Friends App Modification Users can make changes within the Find My Friends app. (Requires
supervision and iOS 7.0 or later.)
Tip: In iOS 13.0 and later, the user can make changes within the Find My app.
Allow Game Center

Users can use the Game Center app. (Requires supervision and iOS 6 or later)

Note: If turned off, the Game Center app deletes from the home screen.
Allow Addition of Game Center Friends Users can add friends to Game Center. (Requires iOS 4.2.1 or later. OS 13.0 and later require supervision.)
Allow Multiplayer Gaming Users can play multiplayer games in Game Center. (Requires iOS 4.1 or later. OS 13.0 and later require supervision.)
Allow Safari Users can access Safari from the home screen. Device users can use the Safari app to browse the web or open web clips. (Requires iOS 4.0 or later. OS 13.0 and later require supervision.)
Allow Autofill The browser can use autofill to complete forms displayed on websites. (Requires iOS 4.0 or later. OS 13.0 and later require supervision.)
Force Fraud Warning Safari warns users about potential fraud on a site.
Allow JavaScript The browser can run JavaScript.
Prevent Pop-ups The browser cannot open pop-ups.
Accept Cookies Select whether the browser rejects all cookies, accepts all cookies, or accepts cookies from visited sites only.
Allow News Users can use the News app. (Requires supervision and iOS 9 or later)
Allow Podcast Users can use podcasts. (Requires supervision and iOS 8 or later)
Allow App Clips

Users can add App Clips. (Requires supervision and iOS 14 or later)

Note: If turned off, any existing App Clips delete from the device.
Allow Files Access to USB Drive Users can connect to any connected USB devices in the Files app. (Requires iOS 13.0 or later)
Allow Files Access to Network Drive Users can connect to any network drives in the Files app. (Requires iOS 13.0 or later)
Delay Software and OS Update Availability By Specify the number of days between when a software or OS update becomes available and when it appears to the device user. (Requires supervision and iOS 11.3 or later)
Single App Mode Allowlist An app can lock to the device screen until conditions specified on the app are met.
Note: Administrators must configure Single App mode behavior for the app outside of SOTI MobiControl.
Note: This setting permits the single app mode but does not implement it.

Select the + button to add applications to the Single App Mode Allowlist.

Visit:
Note: The Single App Mode configuration overrides the Feature Control setting if both refer to the same device.

Media Content

Movies Set the maximum rating for movies to:
  • Don't Allow Movies
  • G
  • PG
  • PG-13
  • R
  • NC-17
  • Allow All Movies
TV Shows Set the maximum rating for TV shows to:
  • Don't Allow TV Shows
  • TV-Y
  • TV-Y7
  • TV-G
  • TV-PG
  • TV-14
  • TV-MA
  • Allow All TV Shows
Apps Set the maximum rating for apps to:
  • Don't Allow Apps
    Important: All App Store applications remove from the device. The user can still view the App Store's content but cannot download or install applications. All Enterprise Apps remain available to the user.
  • 4+
  • 9+
  • 12+
  • 17+
  • Allow All Apps
Allow Explicit Music & Podcasts Users can download music or podcasts containing explicit content.
Note: Certain processes and applications are critical and necessary for the proper operation of the device and the SOTI MobiControl agent. These processes are automatically protected through a built-in "permanent allowlist" and cannot be blocklisted. For example, applications in a lockdown program menu are automatically allowlisted and you cannot blocklist them.