Restrictions

For security-conscious organizations and environments where privacy and information security concerns require controlling the unauthorized transfer of mobile data out of the mobile devices, SOTI MobiControl provides various on-device restrictions including the capability to block various device communications, similar to firewall functionality. The Restrictions configuration enables you to selectively disable device features. Applying the configuration at the individual or group level allows custom profiles for different users and locations in an organization. For example, disabling or enabling Bluetooth and infrared ports determines if end users can beam business cards, applications or documents to one another.

Device Functionality

Disable use of Camera Control the ability of capturing unauthorized photographs by disabling the device’s camera.
Disable FaceTime Prevents the user from utilizing FaceTime.
Disable screen capture Control the ability of applications to capture the device screen.
Disable Photo Stream Prevents the users from using the photo streaming function.
Disable Shared Photo Stream Prevents users from viewing Shared Photo Streams on their device.
Disable Passbook Notifications While Locked Prevents the ability to see Passbook notifications on the lock screen.
Disable Apple Music Prevents users from accessing Apple Music
Disable iMessage Prevents users from sending or receiving messages through iMessage.
Disable Voice Dialing Prevents users from dialing their phone using voice commands
Disable Siri Prevents user from using voice commands to control their device
Show user generated content in Siri Allows Siri to show user generated content
Disable Siri While Device is Locked Prevents the use of Siri while the device is locked
Enable Siri Profanity Filter Creates a filter for profane language
Disable iBookstore Prevents users from viewing and accessing the iBookstore through the iBooks App
Disallow Erotica Content Prevents users from purchasing books categorized as Erotica from the iBookstore
Disable Installation of Apps Disables the installation of Apps from the App Store . Users can still install and update applications using iTunes or Apple Configurator.
Disable automatic app download Prevents users from automatically downloading applications purchased on other devices.
Disable trusting new enterprise app authors Prevents users from trusting enterprise applications
Disable In App Purchasing Prevents the user from purchasing additional features of an application or an additional app from within an app.
Disable AirDrop Prevents users from sharing files with other Apple devices using AirDrop.
Hide Control Centre in Lock Screen Prevents users from accessing Control Centre while on the Lock Screen
Hide Notification Centre in Lock Screen Prevents users from accessing Notification Centre while on the Lock Screen
Hide Today View in Lock Screen Prevents users from accessing the Today View in the Lock Screen
Disable App Removal Prevents users from removing apps from their device
Disable Account Modification Prevents users from making account additions or modification to Email, Contacts, and Calendars
Disable App Cellular Data Usage Modifications Prevents users from making modification to app cellullar data usage
Disable Cloud Keychain Sync Disables the synchronization of login credentials between iOS devices associated with an iCloud account.
Disable Storing Data in iCloud for Managed Apps Prevents users from storing the data from Managed Applications in iCloud
Allow Host Pairing Allows the device to pair with any host computer
Disable Managed to Unmanaged Data Sharing Prevents Managed apps from sharing data with Unmanaged apps
Disable Unmanaged to Managed Data Sharing Prevents Unmanaged apps from sharing data with Managed apps
Disable OTA (over-the-air) PKI Updates Prevents device from obtaining public key infrastructure (PKI) updates OTA
Limit Ad Tracking Prevents apps from using the Advertising Identifier
Disable erase All Content and Settings Prevents users' ability to use Erase All Content and Settings option in Reset UI
Require iTunes Password for all purchases Users are required to enter their Apple ID password before every purchase from iTunes. Ignores the standard grace period between purchases
Disable iCloud Document Synching Prevents users from storing documents in iCloud
Disable iCloud Device Backup Prevents the device from automatically backing up device data to iCloud
Disable iCloud Photo Library Prevents users from using iCloud Photo Library
Disable automatic sync while roaming Control the ability to sync data (i.e. email) while in foreign coverage areas and prevent related expenses by disabling roaming syncing.
Force Encrypted Backups Forces backups to iTunes to be encrypted, this is always selected.
Note: This option should not be used with Supervised devices.
Automatically reject Untrusted TLS Certificates Users will not be prompted to trust certificates that cannot be verified. This setting applies to Safari and to Mail, Contacts and Calendar accounts.
Disable Interactive Configuration Profile Installation Prevents users from installing additional configuration profiles and certificates manually
Disable Submission of Diagnostic and Usage Data Disables submission of iOS diagnostic and usage information to Apple
Disable Touch ID Prevents users from using Touch ID
Disable Passcode Modification Prevents users from adding, changing, or removing a device's passcode
Disable Touch ID fingerprints Modification Prevents users from modifying Touch ID fingerprints
Disable Apple Watch pairing Prevents users from pairing with an Apple Watch
Force Apple Watch wrist detection Paired Apple Watch is forced to use Wrist Detection
Treat AirDrop as unmanaged Classifies AirDrop as an unmanaged drop target
Disable Handoff Prevents user from using Handoff
Disable Internet Search Results in Spotlight Prevents device from returning internet content in Spotlight search results
Disable modifying restrictions Prevents users' ability to enable Enable Restrictions option in the Restrictions UI in Settings
Disable modifying device name Prevents users from changing the device name
Disable modifying Device Wallpaper Prevents users from changing the device wallpaper
Force passcode on first Airplay Pairing Forces all devices receiving AirPlay requests from this device to use a pairing password
Disable predictive Keyboard Prevents users from using predictive keyboards
Disable auto correction Prevents users from using keyboard auto-correction
Disable spell check Prevents users from using keyboard spell-check
Disable Define Lookup Prevents users from using definition lookup

Applications

Disable YouTube Prevents user from accessing YouTube (iOS 5 only)
Disable iTunes Music Store Prevents user from accessing iTunes Music Store
Disable Find My Friends App Modification Prevents user from making changes within the Find My Friends app
Disable Game Center Removes Game Center app from the device Home Screen
Disable Addition of Game Center Friends Prevents users from adding friends to Game Center
Disable Multiplayer Gaming Prevents users from playing multiplayer games in Game Center
Disable Safari Prevents user from accessing Safari to browse websites
Disable Autofill Prevents the browser from using autofill to complete forms displayed on websites
Disable Fraud Warning Prevents the browser from alerting for fraud
Disable JavaScript Prevents the browser from running JavaScript
Prevent Pop-ups Prevents the browser from opening pop-ups
Accept All Cookies Forces the browser to accept all cookies
Accept Cookies from Visited Sites Only Forces the browser to accept cookies from visited sites only
Disable News Disables news
Disable Podcast Prevents users from using podcasts
Single App Mode Allows an app to lock itself to the device screen until conditions specified on the app are met. Note that administrators must configure Single App mode behavior for the app outside of SOTI MobiControl. This restriction only allows the single app mode to occur, it does not implement it.

Click the List button to add applications to the Single App Mode Whitelist. Next, click Add to enter the bundle identifier of the app.

Visit SOTI Central: How to enable autonomous single app mode for guidance on how to whitelist apps in SOTI MobiControl and Apple Developer Documentation: UIAccessibilityRequestGuidedAccessSession for information on how to set up Single App mode.

Note: The Single App Mode configuration supersedes the Restriction setting if both are assigned to the same device.

Media Content

Movies Sets the maximum rating for movies to:
  • Don't Allow Movies
  • G
  • PG
  • PG-13
  • R
  • NC-17
  • Allow All Movies
TV Shows Sets the maximum rating for TV shows to:
  • Don't Allow TV Shows
  • TV-Y
  • TV-Y7
  • TV-G
  • TV-PG
  • TV-14
  • TV-MA
  • Allow All TV Shows
Apps Sets the maximum rating for apps to:
  • Don't Allow Apps
    Important: All App Store applications will be removed from the device. The user will still be able to view the App Store's content. However, they will not be able to download or install any applications from it. All Enterprise Apps will still be available for the user to use.
  • 4+
  • 9+
  • 12+
  • TV-PG
  • 17+
  • Allow All Apps
Disallow Explicit Music & Podcasts Prevents user from downloading music or podcasts containing explicit content
Note: Certain processes and applications are critical and necessary for stable device operation and normal execution of the SOTI MobiControl device agent. These processes are automatically protected through a built-in "permanent whitelist" and cannot be put on a blacklist. Applications that are included in a lockdown program menu are automatically on a whitelist, and cannot be put on a blacklist.