iOS and macOS settings

20 min

The following settings are available:

General settings (iOS and macOS)

CalDAV settings (iOS and macOS)

CardDAV settings (iOS and macOS)

Web Clips settings (iOS and macOS)

Configuration profile settings (iOS, tvOS, and macOS)

LDAP settings (iOS and macOS)

General settings (iOS and macOS)

You can configure a general settings configuration that determines when configuration profiles can be removed from iOS and macOS devices.

General settings can be set once; if you want to use this screen to change these settings, then the user must manually delete the profile.

Procedure

Go to Policies & Configs > Configurations.

Select Add New > Apple > iOS and macOS > General to specify the basic information for interactions with the iOS and macOS configuration profiles.

Configure the general settings as described in General iOS and macOS settings .

Select Save.

Table: General iOS and macOS settings

Item	Description
Name	Enter brief text that identifies this group of iOS and macOS general settings.
Description	Enter additional text that clarifies the purpose of this group of iOS and macOS general settings.
Identifier	Specify the profile identifier. It must uniquely identify this profile. Use the format com.companyname.identifier where identifier describes the profile, as in com.mycompany.work.
Organization	Specify the issuing organization of the profile, as it will be shown to the user.
Control when the profile can be removed	Not for iOS with MDM: Specify when configuration profiles should be removed: Always: always removable. With Authentication: removable with authentication. Never: never removable. Select this option to prevent users from removing the profile.

CalDAV settings (iOS and macOS)

CalDAV configurations allow you to specify parameters for connecting to CalDAV-compliant calendar servers. CalDAV (or Calendaring Extensions to WebDAV), is a remote calendar access standard supported by iOS and macOS.

Users may be prompted for any settings you do not specify.

Procedure

Go to Policies & Configs > Configurations.

Select Add New > Apple > iOS and macOS > CalDAV.

Specify parameters for connecting to CalDAV-compliant calendar servers, as described in CalDAV settings (iOS and macOS) .

Select Save.

Table: CalDAV settings (iOS and macOS)

Item	Description
Name	Enter brief text that identifies this group of iOS and macOS CalDAV settings.
Description	Enter additional text that clarifies the purpose of this group of iOS and macOS general settings.
HostName	Enter the host name of the calendar server.
Port	Enter the port for the calendar server.
Principal URL	Enter the URL for accessing calendar services.
Use SSL	Select to use SSL for data transfer.
Use Google Apps Password	Select to use the Google Apps password. For more information about configuring the Google Apps password, see [].
User Name	Specify the user name to use. The default value is $USERID$. Use this field to specify an alternate format. Why: Some enterprises have a strong preference concerning which identifier is exposed. See Supported Variables for CalDAV Settings.
Password	Specify the password to use. The default value is $PASSWORD$. Use this field to specify a custom format, such as $PASSWORD$_US. See Supported Variables for CalDAV Settings.

Supported Variables for CalDAV Settings

You can use the following variables in fields that support variables.

$USERID$

$EMAIL$

$MANAGED_APPLE_ID$

For Shared iPad devices and User Enrolled devices only.

$NULL$

$USER_CUSTOM1$... $USER_CUSTOM4$ (custom fields defined for LDAP)

CardDAV settings (iOS and macOS)

CardDAV configurations allow you to specify parameters for connecting to CardDAV-compliant address book servers. CardDAV (or vCard Extensions to WebDAV), is a remote contact data access standard supported by iOS and macOS.

This configuration is supported on iOS and macOS v10.8. macOS v10.7 Lion is not supported.

Procedure

Go to Policies & Configs > Configurations.

Select Add New > Apple > iOS and macOS > CardDAV to configure access to subscription address books compatible with this protocol.

Configure your CardDav settings as described in CardDAV settings (iOS and macOS) .

Select Save.

Table: CardDAV settings (iOS and macOS)

Item	Description
Name	Enter brief text that identifies this group of iOS and macOS subscribed address book settings.
Description	Enter additional text that clarifies the purpose of this group of iOS and macOS subscribed address book settings.
HostName	Enter the hostname or IP address of the CardDAV account.
Port	Enter the port number of the CardDAV account.
Principal URL	Enter the Principal URL for the CardDAV account.
Use SSL	Select to use SSL for data transfer.
Use Google Apps Password	Select to use the Google Apps password. For more information about configuring the Google Apps password, see [].
User Name	Specify the user name to use. The default value is $USERID$. Use this field to specify an alternate format. Why: Some enterprises have a strong preference concerning which identifier is exposed. See Supported variables for CardDAV Settings.
Password	Specify the password to use. The default value is $PASSWORD$. Use this field to specify a custom format, such as $PASSWORD$_$USERID$. See Supported variables for CardDAV Settings.
Communication Service Rules (iOS 10 and later)	Select a default audio service or app to be associated with the device user's accounts on the Exchange, CardDAV, LDAP, and Google servers. All calls initiated on the iOS device to contacts from contact lists stored on the server will use the selected audio service by default. This feature is supported on devices running iOS 10 or supported newer versions. To enable communication service rules: Select Choose a default app to be used when calling contacts from this account. A drop-down list of apps is displayed. Select the drop-down list to select the default audio app or service.

Supported variables for CardDAV Settings

You can use the following variables in fields that support variables.

$USERID$

$EMAIL$

$MANAGED_APPLE_ID$

For Shared iPad devices and User Enrolled devices only.

$NULL$

$USER_CUSTOM1$... $USER_CUSTOM4$ (custom fields defined for LDAP)

Web Clips settings (iOS and macOS)

You can send web clips to the home screens of managed devices by creating a web clip setting.

Procedure

Go to Policies & Configs > Configurations.

Select Add New > Apple > iOS and macOS > Web Clips to add web clips to the home screen of users’ devices.

Use Web clips settings to make your configurations.

Table: Web clips settings

Item	Description
Web Clips Set Name	Enter brief text that identifies this group of iOS and macOS web clips settings.
Description	Enter additional text that clarifies the purpose of this group of iOS and macOS web clips settings.

Under the Web Clips field, select Add New. The Add Web Clip dialog box opens.

Use the table below as a guide to completing your web clip entry.

Table: Web clips settings (iOS and macOS)

Item	Description
Name	Enter a name that identifies this configuration.
Address/URL	Enter the address or URL for the target of the web clip. Ensure the URL you enter includes the prefix http:// or https://.
Icon	Select an icon to display for the web clip.
Removable	Clear the Removable check box to prevent users from removing the web clip once it is pushed out to their phones.
Full Screen	By default, Full Screen is selected. When selected, the web clip is displayed as a full-screen application. Apple does not currently support the display of full screen web clips in full screen mode on devices running iOS 8, iOS 8.1, and iOS 8.1.1.
Precomposed	By default, Precomposed is selected. When selected, iOS will not add the bezel shading effect to the icon.
Ignore Manifest Scope	Deselected (default) means Safari UI appears when device user navigates away from the web clip’s URL. Selected means a full screen web clip can navigate to an external web site without showing Safari UI. If Full Screen is deselected, this field has no effect.
Target Bundle Identifier	The application bundle identifier that specifies the application that opens the URL. To use this property, the profile must be installed through an MDM.

In the New Web Clips Setting dialog box, select Add New for additional web clips.

When finished, select Save.

Configuration profile settings (iOS, tvOS, and macOS)

Occasionally, you may want to upload an iOS, tvOS, or macOS configuration profile generated from outside of Ivanti EPMM and push it to devices.

For example, you can send devices an Apple Configurator payload by exporting the payload from Apple Configurator and pushing it to devices as a .plist file. This is particularly useful for edge case scenarios, where the command you wish to execute on the device is not otherwise available.

When pushing a configuration profile to iOS and macOS devices applied to a particular label, Ivanti EPMM also pushes the profile to any Apple TV devices applied to that label.

When using this option, it is required to only have the portion of the .plist that is inside the array of the "PayloadContent", essentially "<dict>...</dict>". Any substitution variables will not be substituted. The file will not be validated and will be added to the payload without any modifications.

Another use case is if you wish to deploy a signed .mobileconfig file, for example, Apple debug configurations via MDM. Because Ivanti EPMM does not expect a signed file, it would not be able to parse it and inject a substitution variable because it would change the signature of the signed file. To get around this, select the Send File Verbatim - do not parse or use substitution variables check box. Files uploaded with this option selected are sent as is to the device without parsing, validating, or signing of the file by Ivanti EPMM.

Ivanti EPMM server will not attempt to process the file by parsing for substitution variables, sign the configuration when delivering to a device, or make any additions or modifications to the configuration. File must be in a valid .mobileconfig format and should be signed.

Procedure

Go to Policies & Configs > Configurations.

Select Add New > Apple > iOS and macOS > Configuration Profile.

In the Name field, enter a name for the configuration profile setting.

Select Choose File and navigate to the relevant .plist file.

You can hide or display the contents of the file as follows:

Select Allow Viewing of Content to make the file contents visible.

Deselect Allow Viewing of Content to hide the file contents.

Select User or Device channel.

If the file is a signed .mobileconfig file, select Send File Verbatim - do not parse or use substitution variables check box.

Select Save.

Select the configuration profile you created and apply it to a relevant label or labels.

LDAP settings (iOS and macOS)

You can configure an LDAP profile for iOS and macOS devices.

Procedure

Go to Policies & Configs > Configurations.

Select Add New > iOS and macOS > LDAP to configure an LDAP profile for iOS and macOS devices.

The New LDAP Setting dialog box opens.

Use the guidelines in the table below to complete this form.

Table: Add new LDAP configuration

Item	Description
Name	Descriptive name to use when referencing this configuration.
Account Description	Optional. Description of the LDAP account.
Account Username	Optional. Username for accessing the LDAP account.
Account Password	Optional. Password that corresponds to the Account Username value. The password applies to encrypted accounts.
Confirm Account Password	Optional. Confirms the password entered in the Account Password field.
Account Hostname	The hostname for the LDAP server.
Use SSL	Whether to use SSL.
Search Settings	Should have at least one entry for the account. Each entry represents a node in the LDAP tree from which to start searching. Select the + button to add a new entry, then edit the entry. An entry consists of the following values: Description: Explains the purpose of the search setting. Scope: Select Base, Subtree, or One Level to indicate the scope of the search. Base indicates just the node level, Subtree indicates the node and all children, One Level indicates the node and one level of children. Search Base: The conceptual path to the specified note (e.g., ou=people, o=mycorp).
Communication Service Rules (iOS 10 and later)	Select a default audio service or app to be associated with the device user's accounts on the Exchange, CardDAV, LDAP, and Google servers. All calls initiated on the iOS device to contacts from contact lists stored on the server will use the selected audio service by default. This feature is supported on devices running iOS 10 or supported newer versions. To enable communication service rules: Select Choose a default app to be used when calling contacts from this account. A drop-down list of apps is displayed. Select the drop-down list to select the default audio app or service.

Select Save.

Restrictions settings (iOS, iPadOS, and macOS)

You can configure restrictions for iOS, iPadOS, and macOS devices.

Procedure

Go to Policies & Configs > Configurations.

Select Add New > Apple > iOS/macOS and tvOS > Restrictions for declarative configurations on iOS 26.4, iPadOS 26.4, and macOS 26.4.

These DDM restrictions currently provide the same functionality as the corresponding legacy MDM restrictions. If both DDM and legacy MDM configurations are applied, the setting with the value false takes precedence. Use DDM restrictions going forward, as they are expected to replace the corresponding legacy MDM restrictions when Apple deprecates them from the com.apple.applicationaccess configuration profile.

The following table describes the iOS, iPadOS, and macOS restrictions settings.

Table: configuration Settings

Item	Description
Intelligence Setting	Configure Apple Intelligence features on supported devices.
External Intelligence Setting	Configure access to external intelligence integrations for Apple Intelligence.
Siri Setting	Configure Siri restrictions on supported devices.
Keyboard Setting	Configure keyboard-related restrictions on supported devices.

A new Toggle option is added for each restriction in the iOS restriction configuration. The toggle determines whether a restriction value is sent to the device.

When the toggle is:

Enabled: The configured value is included in the device payload.

Disabled: The value is not sent to the device and is not managed by the server.

Intelligence Settings

Use the Intelligence Settings to configure Apple Intelligence settings on iOS 26.4, iPadOS 26.4, and macOS 26.4. This declaration helps administrators apply consistent, policy-based controls that manage how devices access and use Apple Intelligence features.

Procedure

Select Restrictions > Intelligence Settings configurations.

Add the Intelligence Settings settings as per the following table:

Table: iOS and macOS 26.4 add intelligence settings configuration

Setting	Description
Name	Enter a name for the iOS or macOS restriction setting.
Description	Enter a description for the iOS or macOS restriction setting.
Platform	Select iOS or macOS
Allow Apple Intelligence Report	AllowAppleIntelligenceReport Select the checkbox to enable Apple Intelligence Report. Toggle the Push to Device button to enable Apple Intelligence Report on supervised devices.
Allow Genmoji	AllowGenmoji Select the checkbox to enable Genmoji. Toggle the Push to Device button to enable Genmoji on supervised devices.
Allow Image Playground	AllowImagePlayground Select the checkbox to enable Image Playground. Toggle the Push to Device button to enable Genmoji on supervised devices.
Allow Image Wand	AllowImageWand Select the checkbox to enable Image Wand. Toggle the Push to Device button to enable Image Wand on supervised devices. This setting is not applicable for macOS devices.
Allow Personalized Handwriting Results Wand	AllowPersonalizedHandwritingResults Select the checkbox to enable Personalized Handwriting Results Wand. Toggle the Push to Device button to enable Personalized Handwriting Results Wand on supervised devices. This setting is not applicable for macOS devices.
Allow Visual Intelligence Summary	AllowVisualIntelligenceSummary Select the checkbox to enable Visual Intelligence Summary. Toggle the Push to Device button to enable Visual Intelligence Summary on supervised devices. This setting is not applicable for macOS devices.
Allow Writing Tools	AllowWritingTools Select the checkbox to enable Writing Tools. Toggle the Push to Device button to enable Writing Tools on supervised devices.
Force On-Device Only Dictation	ForceOnDeviceOnlyDictation Select the checkbox to enable On-Device Only Dictation. Toggle the Push to Device button to enable On-Device Only Dictation on supervised devices.
Force On-Device Only Translation	ForceOnDeviceOnlyTranslation Select the checkbox to enable On-Device Only Translation. Toggle the Push to Device button to enable On-Device Only Translation on supervised devices. This setting is not applicable for macOS devices.
Allow Smart Replies	AllowSmartReplies Select the checkbox to enable Smart Replies. Toggle the Push to Device button to enable Smart Replies on supervised devices.
Allow Summary	AllowSummary Select the checkbox to enable Summary. Toggle the Push to Device button to enable Summary on supervised devices.
Allow Transcription	AllowTranscription Select the checkbox to enable Transcription. Toggle the Push to Device button to enable Transcription on supervised devices.
Allow Transcription Summary	AllowTranscriptionSummary Select the checkbox to enable Transcription Summary. Toggle the Push to Device button to enable Transcription Summary on supervised devices.
Allow Summary	AllowSummary Select the checkbox to enable Summary. Toggle the Push to Device button to enable Summary on supervised devices.

Select Save.

If you try to save the configuration without enabling any restriction toggle, the following message appears: Enable at least one restriction toggle before saving.

External Intelligence Settings

Use the External Intelligence Settings to configure External Intelligence integrations on iOS 26.4, iPadOS 26.4, and macOS 26.4 devices. This configuration helps administrators apply consistent, policy-based settings that control how devices connect and use supported external intelligence services.

Procedure

Select Restrictions > External Intelligence Settings configurations.

Add the External Intelligence Settings settings as per the following table:

Table: iOS and macOS 26.4 add external intelligence settings configuration

Setting	Description
Name	Enter a name for the iOS or macOS restriction setting.
Description	Enter a description for the iOS or macOS restriction setting.
Platform	Select iOS or macOS
Enabled	Enabled Select the checkbox to allow External Intelligence Integrations. Toggle the Push to Device button to enable External Intelligence Integrations on supervised devices.
Allow Sign In	AllowSignIn Select the checkbox to allow External Intelligence Integrations Sign In. Toggle the Push to Device button to enable External Intelligence Integrations on supervised devices.
Allowed Workspace IDs
Allowed Workspace IDs	AllowedWorkspaceIDs Select the checkbox to allow External Intelligence Workspace IDs. Toggle the Push to Device button to enable External Intelligence Integrations on supervised devices.
workspaceID	workspaceID Select the checkbox to allow Workspace ID. Toggle the Push to Device button to enable External Intelligence Integrations on supervised devices.

Select Save.

If you try to save the configuration without enabling any restriction toggle, the following message appears: Enable at least one restriction toggle before saving.

Siri Settings

Use the Siri Settings to configure Siri settings on iOS 26.4, macOS 26.4, and watchOS 26.4 devices. This configuration helps administrators apply consistent, policy-based controls that manage how devices access and use Siri features.

Procedure

Select Restrictions > Siri Settings configurations.

Add the Siri Settings settings as per the following table:

Table: iOS, macOS, and watchos 26.4 add siri settings configuration

Setting	Description
Name	Enter a name for the iOS or macOS restriction setting.
Description	Enter a description for the iOS or macOS restriction setting.
Platform	Select iOS or macOS or watchOS
Enabled	Enabled Select the checkbox to enable Siri. Toggle the Push to Device button to enable Siri on supervised devices. This setting is not applicable for watchOS devices.
Allow User Generated Content	AllowUserGeneratedContent Select the checkbox to allow User Generated Content. Toggle the Push to Device button to enable Siri on supervised devices. This setting is not applicable for macOS devices.
Allow While Locked	AllowWhileLocked Select the checkbox to allow While Locked. Toggle the Push to Device button to enable Siri on supervised devices. This setting is not applicable for macOS devices.
Force Profanity Filter	ForceProfanityFilter Select the checkbox to Force Profanity Filter. Toggle the Push to Device button to enable Siri on supervised devices. This setting is not applicable for macOS devices.

Select Save.

If you try to save the configuration without enabling any restriction toggle, the following message appears: Enable at least one restriction toggle before saving.

Keyboard Settings

Use the Keyboard Settings to configure keyboard settings on iOS 26.4 and macOS 26.4 devices. This declaration helps administrators apply consistent, policy-based controls that manage keyboard behavior, input options, and related user experience settings.

Procedure

Select Restrictions > Keyboard Settings configurations.

Add the Keyboard Settings settings as per the following table:

Table: iOS and macOS 26.4 add Keyboard settings configuration

Setting	Description
Name	Enter a name for the iOS or macOS restriction setting.
Description	Enter a description for the iOS or macOS restriction setting.
Platform	Select iOS or macOS
Allow Auto-Correction	AllowAutoCorrection Select the checkbox to enable Auto-Correction. Toggle the Push to Device button to enable Auto-Correction on supervised devices. This setting is not applicable for macOS devices.
Allow Definition Lookup	AllowDefinitionLookup Select the checkbox to enable Definition Lookup. Toggle the Push to Device button to enable Definition Lookup on supervised devices.
Allow Dictation	AllowDictation Select the checkbox to enable Dictation. Toggle the Push to Device button to enable Dictation on supervised devices.
Allow Math Keyboard Suggestions	AllowMathKeyboardSuggestions Select the checkbox to enable Math Keyboard Suggestions. Toggle the Push to Device button to enable Math Keyboard Suggestions on supervised devices.
Allow Predictive Text	AllowMathKeyboardSuggestions Select the checkbox to enable Predictive Text. Toggle the Push to Device button to enable Predictive Text on supervised devices. This setting is not applicable for macOS devices.
Allow Slide to Type	AllowSlideToType Select the checkbox to enable Slide to Type. Toggle the Push to Device button to enable Slide to Type on supervised devices. This setting is not applicable for macOS devices.
Allow Spell Check	AllowSpellCheck Select the checkbox to enable Spell Check. Toggle the Push to Device button to enable Spell Check on supervised devices. This setting is not applicable for macOS devices.
Allow Text Replacement	AllowTextReplacement Select the checkbox to enable Text Replacement. Toggle the Push to Device button to enable Text Replacement on supervised devices. This setting is not applicable for macOS devices.

Select Save.

If you try to save the configuration without enabling any restriction toggle, the following message appears: Enable at least one restriction toggle before saving.