Feature Control (macOS)

For security-conscious organizations where privacy and information security concerns require controlling mobile data and other features, SOTI MobiControl provides diverse on-device restrictions. These include blocking certain device communications, similar to firewalls and more. You can configure feature control when:

You may also selectively turn off device features with the Feature Control profile configuration. Applying the configuration at the individual or group level creates custom profiles for different users and locations in an organization. For example, turning Bluetooth and infrared ports on or off determines if device users can beam business cards, applications, or documents to one another.

Device Functionality

Lock Desktop Picture The user cannot change the desktop picture selection. Enter the file path to the desktop picture. Leave the path blank to use the current desktop picture collection.
Allow Use of a Built-in Camera The user can use the built-in camera.
Note: When you disable this feature, no applications, native or enterprise, can access the camera.
Allow Apple Intelligence Reports Enables the device to generate and share usage reports related to Apple Intelligence features, such as personalization and performance.
Allow External Intelligence Integrations Permits integration with approved third-party intelligence services or applications to extend Apple Intelligence capabilities.
Allow Sign-in Forces external intelligence providers into anonymous mode. If a user is already signed in to an external intelligence provider, applying this restriction signs them out.
Allow Image Playground Allows users to create AI-generated images using Apple’s built-in creative tools.
Allow Writing Tools Grants access to Apple Intelligence writing tools, such as rewrite, proofread, and summarize, across supported apps.
Allow Genmoji Creation Enables users to create personalized emojis (Genmojis) using on-device intelligence.
Allow Mail Summary Allows Apple Intelligence to generate concise summaries of lengthy email threads in the Mail app.
Allow Notes Transcription Enables automatic transcription of handwritten or audio notes using Apple Intelligence.
Allow Notes Transcription Summary Allows Apple Intelligence to generate summaries of transcribed notes in the Notes app.
Allow Safari Summary Allows Apple Intelligence to summarize web content in Safari for quicker reading and comprehension.
Allow Mail Smart Replies Enables Apple Intelligence to suggest smart reply options in the Mail app based on message content.
Allow iCloud Documents and Data Documents and key values can sync to iCloud.
Allow Use of iCloud Password for Local Accounts Users can use the iCloud password to sign in to the local account.
Allow Back to My Mac iCloud Service Users can use the macOS Back to My Mac iCloud service.
Allow Find My Mac iCloud Service Users can use the macOS Find My Mac iCloud service.
Allow iCloud Bookmark Sync Users can use the macOS iCloud Bookmark sync.
Allow iCloud Mail Services Users can use the macOS iCloud Mail services.
Allow iCloud Calendar Services Users can use the macOS iCloud Calendar services.
Allow iCloud Reminder Services Users can use the iCloud Reminder services.
Allow iCloud Address Book Services Users can use the macOS iCloud Address Book services.
Allow iCloud Notes Services Users can use the macOS iCloud Notes services.
Allow iCloud Keychain Sync Users can use iCloud keychain synchronization.
Allow Spotlight Internet Search Suggestions Spotlight internet search suggestions appear in Spotlight searches.
Allow USB Restricted Mode The device can connect to new USB accessories only after device user authorization.
Restriction: Requires supervision and macOS 13 or later.
Allow Auto Unlock Allows users to unlock their Mac using an authenticated Apple Watch when nearby.
Allow Cloud Desktop And Documents Enables iCloud Drive to automatically sync the user’s Desktop and Documents folders across Apple devices.
Allow Universal Control Allows users to control multiple Apple devices (Mac and iPad) using a single mouse and keyboard.
Allow Content Caching Enables the device to cache software updates, app data, and iCloud content for faster distribution to other Apple devices on the same network.
Allow Only Configured Widgets Allows users to choose from a predefined set of widgets.

Applications

Allow Game Center Users can use the Game Center app.
Note: If turned off, the Game Center app deletes from the home screen.
Allow Addition of Game Center Friends Users can add friends to the Game Center.
Allow Multiplayer Gaming Users can play multiplayer games in the Game Center.
Allow Account Modifications Users can change their account in the Game Center.
Allow Safari Autofill The browser can use autofill to complete forms displayed on websites.
Allow App Store App Adoption Users can adopt apps that come free with their Mac.
Require Admin Password to Install or Update Apps Installing or updating apps requires the admin password.
Allow App Store to Software Updates Only The Mac App Store is in update-only mode.
Allow Apple Music Users can access Apple Music.
Allow Only Selected Applications Applications from the provided list and Specify Allowlist/Blocklist path can allow/disallow launching applications.
Delay Availability of Software Updates Available software updates do not appear to the device user for a specified number of days, up to a maximum of 90 days. The default value is 30 days.
Restriction: Requires macOS 10.13.4 and later.
Delay Availability of Non-OS Software Updates Available non-OS software updates do not appear to the device user for a specified number of days, up to a maximum of 90 days. The default value is 30 days.
Restriction: Requires macOS 11 and later.
Delay Availability of Major OS Software Upgrades Available major OS software upgrades do not appear to the device user for a specified number of days, up to a maximum of 90 days. The default value is 30 days.
Restriction: Requires macOS 11.13 and later.

Media Content

Allow AirDrop Network Access Allows users to access the AirDrop network for sharing files with nearby Apple devices.
Allow Internal Media Access Allows users to mount internal media volumes.
Allow External Media Access Allows users to mount external storage devices, such as USB drives.
Allow Disk Image Allows users to mount disk image files.
Allow DVD RAM Allows users to access DVD-RAM media.
Allow CDs Allows users to mount and access CD media.
Allow DVDs Allows users to mount and access DVD media.
Allow Recordable Disk Allows users to mount recordable media.
Eject Volume on Logout Automatically ejects removable media when the user logs out.
Allow Sharing Services Enables macOS sharing services. You can select which services are allowed.