Skip to main content

Apple-specific MDM policies available in Swif

Updated over 2 weeks ago

Use the table below as a quick glossary when you need to decide which payload to configure for macOS, iOS, or iPadOS.

Each row shows the policy’s name as it appears in Device Management → Policies → New Policy → macOS/iOS, its purpose, and the minimum OS versions it supports.

Policy (alphabetical)

What it controls

Supported platforms / minimum OS

AirPrint

Adds or removes AirPrint printers, sets default printer options

macOS 10.10 +, iOS 7 +, iPadOS 7 +

Airdrop

Allow / block AirDrop file sharing

macOS 10.13 +, iOS 7 +, iPadOS 7 +

App Store

Enable/disable App Store, automatic downloads, in-app purchases

macOS 10.9 +

Black- or whitelist specific apps by bundle-ID

macOS 10.7 +

Bluetooth

Toggle Bluetooth, force discoverable state or accessories block list

macOS 14.0, iOS 11 +, iPadOS 11 +

Lock Dock layout, add/remove items, magnification, auto-hide

macOS 10.7 +

Turn on disk encryption, escrow keys , defer enablement

macOS 10.9 +

Allow / deny Find My Mac / iPhone / iPad

macOS 10.7 +

Firewall

macOS Application Firewall settings (stealth, allowed apps, logging)

macOS 10.12 +

Google Chrome Incognito

Force-enable or block Incognito mode in Chrome for macOS

macOS 12 +

Force or block Chrome Web-Store extensions

macOS 12 +

Identity Login (Platform SSO)

Configure Google / Okta / Azure login at macOS lock screen

macOS 12 +

Apple Intelligence

Enable / disable on-device Apple Intelligence features*

macOS 15 +, iOS 18 +, iPadOS 18 +

Login Items

Manage background/login items (launch agents, daemons)

macOS 13 +

Login Window

Banner, auto-login, shutdown options, fast-user-switching

macOS 10.7 +

Length, complexity, history, grace period, Touch ID/Face ID rules

macOS 10.10 +, iOS 4 +, iPadOS 4 +

Printing (AirPrint/IPP)

Add, restrict or remove printers; duplex defaults

macOS 10.7 +

Grant/deny app access to camera, mic, full-disk, files, automations

macOS 10.14 +

802.1X Wi-Fi / VPN profiles with TLS, PEAP, EAP-TTLS

macOS 10.10 +, iOS 7 +, iPadOS 7 +

Safari Extension

Push & enforce Swif Safari Shadow-IT extension

macOS 15 +

Screen Saver

Require password after idle, module choice, message

macOS 10.11 +

New macOS 15/iOS 18 device-level privacy toggles (camera, Face ID, USB restricted mode etc.)

macOS 11 +, iOS 4 +, iPadOS 4 +

Setup Assistant

Skip or show specific panes during OOBE/DEP enrollment

macOS 10.11 +, iOS 14 +, iPadOS 14 +

Sharing Restrictions

Disable AirDrop, Messages share sheet, screenshots, etc.

macOS 10.14 +, iOS 13 +, iPadOS 13 +

Siri

Enable / disable Siri, dictation, profanity filter

macOS 14 +, iOS 5 +, iPadOS 5 +

Delay or force OS updates, beta channel, automatic reboot

macOS 12 +, iOS 11.5 +, iPadOS 11.5 +

System Preferences Security

Lock specific panes (Profiles, Users & Groups, etc.)

macOS 10.10 +

Time Machine

Mandate backups, set destination, prevent manual wipes

macOS 10.7 +

Touch ID

Allow or block Touch ID for unlock / Apple Pay

macOS 12.4 +, iOS 7 +, iPadOS 7 +

Tracking

Allow / restrict app tracking transparency prompts

macOS 12 +

USB

Block mass-storage USB class, allow specific vendor IDs

macOS 12 +

Prohibit creating local accounts, limit guest, hide admin list

macOS 13 +, iOS 9 +, iPadOS 9 +

VPN

IKEv2 / L2TP / Cisco IPSec payloads with certs or shared secret

macOS 10.7 +, iOS 4 +, iPadOS 4 +

Wi-Fi

Push WPA-2/3 Enterprise & PSK networks, hotspot settings

macOS 10.7 +, iOS 4 +, iPadOS 4 +

iCloud

Allow/deny iCloud Drive, Photos, Keychain, Private Relay

macOS 10.12 +, iOS 5 +, iPadOS 5 +

Google Chrome Extension Deployment & Blocking

Force-install or block specific Chrome Web Store extensions

macOS

* Apple Intelligence policy is available in the latest macOS Sequoia / iOS 18 betas and may require a device restart.


How to use this table

  1. Find the control you need—search within the page (⌘/Ctrl-F) or scroll alphabetically.

  2. Verify the minimum OS; payloads are ignored by older versions.

  3. Click Configure in Swif → Policy → New Policy wizard to set the options described.

Need Windows or Linux equivalents? Switch to the Windows or Linux tabs in the same wizard to see their separate payload glossary.

To write a custom policy, you can find more details at Creating a Custom macOS Policy in Swif.

Did this answer your question?