Create a Custom Configuration for Apple

Important

Read Before starting.
When configuring custom restrictions, there is a potential risk of rendering the device unusable. Proceed with caution.

New Custom Configuration for Apple Devices

Note

1. Navigate to Dash.capaone.com.

2. Go to Apple → Configurations → New.

3. Find “Custom Configuration” in the list and enable the feature.

   

4. Apple uses plist to define the restrictions you can find the templates on this site if you scroll to the bottom. https://developer.apple.com/documentation/devicemanagement/restrictions

Example “Deactivating Apple intelligence”

Note

\<plist version="1.0"\>
\<dict\>
    \<key\>PayloadContent\</key\>
    \<array\>
        \<dict\>
            \<key\>allowAppleIntelligenceReport\</key\>
            \<false/\>
           \<key\>allowExternalIntelligenceIntegrations\</key\>
           \<false/\>
           \<key\>allowExternalIntelligenceIntegrationsSignIn\</key\>
           \<false/\>
           \<key\>allowVisualIntelligenceSummary\</key\>
           \<false/\>
           \<key\>allowWritingTools\</key\>
           \<false/\>
\<key\>PayloadIdentifier\</key\>
            \<string\>com.example.myrestrictionspayload\</string\>
            \<key\>PayloadType\</key\>
            \<string\>com.apple.applicationaccess\</string\>
            \<key\>PayloadUUID\</key\>
            \<string\>53bec1be-ffec-4f88-acbd-b02aee8f04a9\</string\>
            \<key\>PayloadVersion\</key\>
            \<integer\>1\</integer\>
        \</dict\>
    \</array\>
    \<key\>PayloadDisplayName\</key\>
    \<string\>Restrictions\</string\>
    \<key\>PayloadIdentifier\</key\>
    \<string\>com.example.myprofile\</string\>
    \<key\>PayloadType\</key\>
    \<string\>Configuration\</string\>
    \<key\>PayloadUUID\</key\>
    \<string\>6020206c-12c2-4ada-987a-dd4c560ca73a\</string\>
    \<key\>PayloadVersion\</key\>
    \<integer\>1\</integer\>
\</dict\>
\</plist\>

Important

It is important that all configuration settings remain inside the Payload Content, as shown in the example. If any settings are placed outside of the Payload Content, the configuration will not be applied.

Steps to validate the Configuration has been applied

Note

1. Open the settings app on the device.

2. Find General → VPN And Device Management → open the MDM Profile.

3. Here you should see Restrictions.

   

4. Open Restrictions to see the applied restrictions.

   

Important

If no restrictions are present, the configuration has not been applied correctly.
Please check the plist for any syntax errors.