Cortado Server – Manual

iOS and macOS policies

34 views January 21, 2019 January 20, 2020 0

iOS Policies

Create policy configuration

  • Select iOS Policies as the policy you want to add.
  • You can use the filter to display the existing policies, depending on the type of registration (enrollment type). The Reset to defaults button resets all changes you have made to the default settings.

Note! Select the Device Enrollment filter if you are using devices that were embedded via Device Enrollment but are not supervised. For supervised devices that have been embedded via Device Enrollment, use the Supervised Devices filter.

  • First enter a name for the policy in the field below as well as an descrip­tion (upper arrow in illus.).
  • Now, select the desired option(s), in the example, the checkbox Camera has been disabled (lower arrow in illus.).
Set up iOS policy (example in picture)

Set up iOS policy (example in picture)

  • Then assign the new policie to an user (see section Assigning policies).
  • The outcome in the example: The apps Camera and FaceTime will be deactivated on the device.
Itunes Store: available (left), deactivated (right)

Itunes Store: available (left), deactivated (right)

Note! On iOS Supervised Devices the users don’t need to confirm the instal­lation of apps pushed.

Set up the Kiosk Mode

You can set up a kiosk mode for Supervised Devices. The user can then only access a single app.

  • If you want to use Kiosk Mode, activate the checkbox.
  • Click on Search (lower arrow on illus.) to search for the desired app in the app store and then select Add.
  • The corresponding Bundle ID (upper arrow in illus.) will then be automatically inserted under App Lock iden­tifier (in the example: Pages).
configure Kiosk Mode

configure Kiosk Mode

  • Assign the new policy to an user (see sections Assigning policies).
  • The outcome in the example: Then the device can only be used with the app Pages.
Create passcode policies

Here you can define the criteria according to which a device passcode may be created by users (see illus.). As soon as you set a check mark in the Force passcode checkbox, the selection of a minimum passcode length, a maximum passcode age, a maximum number of failed attempts and a passcode history is mandatory.

Note! Please note that for devices registered via User Enrollment, a six-digit passcode must be used by the user when selecting Force passcode, regardless of the criteria you have specified.

Restricting app usage
  • The Restrict App Usage option allows you to restrict access to apps from the App Store.
  • Select whether you want to prohibit certain apps (Do not allow some apps) or whether you want to allow only certain apps (Only allow some apps).
  • For this purpose, click on Search (lower arrow in illus.) to search for the desired app in the app store and then select Add. The corresponding Bundle ID will then be automatically inserted under Application Bundle IDs (upper arrow in illus.).
Restrict use of apps

Restrict use of apps

  • Assign the new policy to an user (see sections Assigning policies).
  • The outcome in the example: The Game Center app has been disabled on the device. Although the Facebook app can be downloaded from the app store, it is nonetheless disabled on the device (and not visible to the user).

macOS Policies

In the same way, for macOS devices, permissions can also be withdrawn and password policies determined. There are several Policies available for Supervised Devices. The configuration is the same as for iOS Policies.

configure macOS Policy

configure macOS Policy

iOS Policies Using Apple Configurator

If you select this option, you can import iOS policies which you configure with Apple Configurator 2.

  • Then upload the file (*.mobileconfig) by clicking on Select File.
upload iOS configuration profile

upload iOS configuration profile

Was this helpful?