---
title: Setting unique restrictions for signed-out devices
slug: device-management-apple/setting-unique-restrictions-for-signed-out-devices
createdAt: 2026-10-06T07:47:35.473Z
---

The Signed-Out label enables you to specify more stringent restrictions for multi-user devices when a user signs out. This is a dynamic label that applies automatically to any multi-user iOS device that does not have a signed-in user.

Specifying restrictions involves the following main steps:

1. Create the restrictions that you want applied when a user signs out.
   For example, you might want to disable access to YouTube when an authorized user is not signed in.
2. Apply each policy and configuration to the <font color="#323232">Signed-Out</font> label.

Suppose you want iPad devices to be restricted to basic web use when an authorized user is not signed in. You would need to create a Restrictions configuration to lock down the camera, inappropriate content, screen captures, app installation, and so on.

**Procedure&#xA0;**

1. Go to <font color="#323232">Policies &amp; Configs &gt; Configurations</font>.
2. Select <font color="#323232">Add New &gt; Apple &gt; iOS / tvOS &gt; Restrictions</font>. The New Restrictions Setting dialog box opens.
3. Assign a Name to the configuration.
4. Clear the check boxes for the items you want to restrict.
5. Select <font color="#323232">Save</font>.
6. Select the new configuration.
7. Select <font color="#323232">Actions &gt; Apply To Label</font>.
8. Select <font color="#323232">Signed-Out</font>.
9. Select <font color="#323232">Apply</font>.
   Ivanti EPMM sends the new restriction settings to multi-user devices upon sign-out.