Enrollment Methods

• Self-enrollment

• Supervision enabled via Apple Configurator 2
• Self-enrollment

• Self-enrollment
• Enrollment as part of device activation

• Self-enrollment
• Enrollment as part of device activation

Supported Commands

• Inventory
• Lock
• Clear Passcode
• Unenroll

• Factory Reset

• Inventory
• Lock
• Clear Passcode
• Unenroll
• Factory Reset
• Check for OS Update
• Update OS
• Enable/Disable Lost Mode
• Locate Device (Lost Mode only)
• Play Sound (Lost Mode only)
• Set Wallpaper
• Clear User Restrictions
• Rename Device

• Inventory
• Lock
• Clear Passcode
• Unenroll
• Factory Reset
• Remove Activation Lock

• Inventory
• Lock
• Clear Passcode
• Unenroll
• Factory Reset
• Check for OS Update
• Update OS
• Enable/Disable Lost Mode
• Locate Device (Lost Mode only)
• Play Sound (Lost Mode only)
• Set Wallpaper
• Clear User Restrictions
• Rename Device
• Remove Activation Lock

User Scenario

End-user owned devices

Institutionally owned devices not purchased through Apple

Institutionally owned devices purchased through Apple DEP, where supervised control is not needed

Institutionally owned devices purchased through Apple DEP, where supervised control is needed

Restrictions

• Device - Allow Siri
• Device - Allow Siri while device locked
• Device - Allow handoff (i.e. activity continuation)
• Device - Force wrist detection for paired watch
• iCloud - Allow backup
• iCloud - Allow document sync
• iCloud - Allow photostream
• iCloud - Allow shared stream
• iCloud - Allow photo library
• iCloud - Allow keychain sync
• iCloud - Allow managed apps to use iCloud sync
• Security/Privacy - Force limited ad tracking
• Security/Privacy - Allow enterprise book backup
• Security/Privacy - Allow enterprise book metadata sync
• Security/Privacy - Force AirDrop to be considered an unmanaged target
• Security/Privacy - Allow opening documents from managed apps in unmanaged apps
• Security/Privacy - Allow opening documents from unmanaged apps in managed apps
• Security/Privacy - Allow diagnostic data to be sent to Apple
• Security/Privacy - Allow user to accept untrusted TLS certificates
• Security/Privacy - Force encrypted backups
• Security/Privacy - Allow OTA public-key infrastructure updates
• Content Ratings - Allow explicit music and podcasts
• Content Ratings - Movies
• Content Ratings - TV Shows
• Content Ratings - Apps
• Camera/Video - Allow use of camera
• Camera/Video - Allow FaceTime
• Camera/Video - Allow screenshots and screen record
• Camera/Video - Force outgoing AirPlay requests to require pairing password
• Camera/Video - Force inbound AirPlay pairing requests to require a password
• Cellular - Allow automatic sync when roaming
• Locked Device - Allow voice dialing while device is locked
• Locked Device - Allow Touch ID to unlock device
• Locked Device - Allow lock screen access to control center
• Locked Device - Allow lock screen notification view
• Locked Device - Allow lock screen today view
• Locked Device - Allow passbook while locked
• Social/Gaming - Allow adding Game Center friends
• Store/Apps - Allow in-app purchases
• Store/Apps - Password required for all iTunes Store purchases
• Store/Apps - Allow enterprise app trust
• Store/Apps - Allow use of iTunes Store
• Store/Apps - Allow bookstore erotica
• Internet - Allow Safari
• Internet - Safari - Enable autofill
• Internet - Safari - Force Fraud Warning
• Internet - Safari - Enable JavaScript
• Internet - Safari - Block pop-ups
• Internet - Safari - Accept cookies
• Managed Settings - Allow voice roaming
• Managed Settings - Allow data roaming
• Managed Settings - Allow personal hotspot

All Restrictions from BYOD
PLUS:

• Device - Force Siri profanity filter
• Device - Allow definition lookup
• Device - Allow predictive keyboard
• Device - Allow auto-correct
• Device - Allow spell check
• Device - Allow keyboard shortcuts
• Device - Allow watch to be paired
• Device - Allow wallpaper modification
• Device - Allow Bluetooth modification
• Device - Allow dictation
• Device - Force Wi-Fi allow list
• Device - Force unprompted managed classroom screen observation
• Device - Force delay of notification of software updates
• Device - Specify number of days before displaying the availability of an update
• Security/Privacy - Allow account modification
• Security/Privacy - Allow air drop
• Security/Privacy - Allow host pairing
• Security/Privacy - Allow user to install configuration and certificate profiles
• Security/Privacy - Allow erase content and settings
• Security/Privacy - Allow the enabling of restrictions
• Security/Privacy - Allow passcode to be changed
• Security/Privacy - Allow the device name to be changed
• Security/Privacy - Allow notification settings to be modified
• Security/Privacy - Allow diagnostic submission to be modified
• Security/Privacy - Allow AirPrint
• Security/Privacy - Allow AirPrint credential storage
• Security/Privacy - Force AirPrint trusted TLS requirement
• Security/Privacy - Allow AirPrint beacon discovery
• Security/Privacy - Allow prompts to setup nearby devices
• Security/Privacy - Allow VPN creation
• Cellular - Allow app cellular data usage changes
• Locked Device - Allow device to always be able to connect to USB devices when locked
• Social/Gaming - Allow multiplayer gaming
• Social/Gaming - Allow iMessage
• Social/Gaming - Allow changes to find my friends
• Social/Gaming - Allow game center
• Store/Apps - Allow app install
• Store/Apps - Allow app removal
• Store/Apps - Allow bookstore
• Store/Apps - Allow podcasts
• Store/Apps - Allow App Store
• Store/Apps - Allow automatic download of apps purchased on other devices
• Store/Apps - Allow removal of system apps from devices
• Internet - Allow Siri to return internet search results
• Music/Media - Allow iTunes
• Music/Media - Allow News
• Music/Media - Allow Apple Music Radio
• Education/Classroom - Allow classroom app to view the screen
• Education/Classroom - Force permission to view a student's screen without a prompt
• Education/Classroom - Force acceptance of teacher requests
• Education/Classroom - Force teachers to approve requests to leave classes
• Education/Classroom - Force app and device lock on teacher request
• Managed Settings - Allow supervised devices to register with activation lock when Find My iPhone is enabled

Same as BYOD

Same as Supervised

Enrollment Profiles

• None

• Ability to disable setup steps ¹

• Ability to disable setup steps ¹
• Set MDM enrollment options

• Ability to disable setup steps ¹
• Set MDM enrollment options