OS X restrictions settings

Use this payload to permit or restrict access to specific preferences, apps, Dashboard widgets, media, and sharing services on Mac computers.

Note: Use the OS X restrictions payload for OS X device, user, and user group configuration profiles. For more information, see About profiles and payloads and Payload best practices.

Preferences

To prevent users from accessing specific panes of System Preferences, select only the panes you want users to access. If a pane isn’t listed, make sure it’s installed on the server with Profile Manager.

Apps

Manage access to Game Center and app usage. You can allow access to any app that is in the folders you designate or you can disallow apps based on their location.

To add an app or folder to the list, it must be installed on the server with Profile Manager enabled.

Setting

Description

Allow use of Game Center

When this option is off, Game Center is disabled.

Allow multiplayer gaming

When this option is off, multiplayer gaming is disabled.

Allow adding Game Center friends

When this option is off, users of Game Center can’t invite friends.

Allow Game Center account modification

When this option is off, users of Game Center can’t modify their user name or password.

Allow App Store app adoption

When this option is off, iLife and iWork apps that shipped with OS X can’t be adopted by the App Store.

Require admin password to install or update apps

When this option is on, an administrator password is required in order to update any apps. The default is Off.

Restrict App Store to MDM installed apps and software updates only

When this option is on, the App Store can only be used to update apps installed by MDM and Apple software updates. The default is Off.

Restrict which apps are allowed to launch

When this option is on, you can restrict which apps can be used. The default is Off.

Widgets

Use Add add button to specify which Dashboard widgets the user can open. To specify the widgets, they must be installed on the server with Profile Manager enabled.

Media

The Media Access payload lets you specify whether to allow AirDrop and what types of storage media to allow. You can prevent access entirely, allow read-only access, or permit full access if the user authenticates with a local administrator password. You can also specify that all removable media be ejected when the user logs out.

Sharing services

Restrict the services that are available in the Share menu for apps.

Setting

Description

AirDrop

When this option is off, AirDrop can’t be used to share items.

Facebook

When this option is off, items can’t be posted to Facebook.

Twitter

When this option is off, items can’t be posted to Twitter.

Mail

When this option is off, items can’t be attached to a mail message.

Messages

When this option is off, items can’t be sent using iMessage or SMS.

Video services

When this option is off, items can’t be posted to Flickr, Vimeo, Tudou, and Youku.

Add to Photos

When this option is off, items can’t be sent to Photos.

Add to Aperture

When this option is off, items can’t be sent to Aperture.

Add to Reading List

When this option is off, items can’t be sent to the Reading List in Safari.

Sina Weibo

When this option is off, items can’t be posted to Sina Weibo.

New sharing services

When this option is off, no new sharing services are enabled.

Functionality

You can choose the location of the image file for the Desktop background and decide whether that image selection can be changed.

You can also restrict the following:

Setting

Description

Allow use of camera

When this option is off, cameras are disabled and the Camera icon is removed from the Home screen. Users can’t take photographs or videos, or use FaceTime.

Allow iCloud documents and data

When this option is off, documents and data aren’t added to iCloud.

Allow use of iCloud password for local accounts

When this option is off, users can’t use their iCloud password for their local account password.

Allow Spotlight Suggestions

When this option is off, Spotlight won’t return any results from an Internet search.