Skip to Content
ConfigurationGroupsPligence Connect

Creating Groups

You may proceed from this point if you have purchased the BYOD/Fully Managed license. To continue, ensure that you have completed Step 4 of the VPN Connection setup, where you’ve successfully configured your groups. Once this step is finalized, you can move forward with the advanced configurations tailored for BYOD or Fully Managed environments.
💡

After purchasing the BYOD/Fully Managed license, admins can manage and monitor all user data, including Secure Connect. For secure integration, follow the Secure Connect guidelines to set up the VPN Gateway first. Once completed, admins can proceed with full system management and oversight.

Setting up Pligence Connect

Groups

  • After setting the policy type to ‘Standard,’ you can begin customizing the policies specific to the device type, whether it’s Android or iOS. This allows you to tailor the management and security settings to the unique requirements of each platform.

  • Once you’ve added a group, click on the “Setup Policies” button to configure the policies for that group. This will open a detailed configuration window where you can adjust various settings for the devices assigned to the group.

  • Customize the policies based on the specific needs of your organization. Decide whether to allow or restrict certain functionalities according to the system being managed (Android or iOS). Ensure that each policy aligns with your security standards and operational requirements.

NOTE: If we create a compliance policy for the group, BYOD or Fully Managed with Personal usage cannot be enrolled

NOTE: The kiosk will be accessible exclusively in the Groups tab and will not appear in the Users tab.

The following policies apply to Android devices and can be further modified to suit your deployment strategy.

Android Policies:

android policies

Passcode

Apply a passcode policy to the device or work profile, selecting low, medium, or high complexity. Set a limit on failed attempts before the device locks or data is wiped.

passcode

Wifi Configuration

Add specific approved networks, automatically connecting devices while restricting users from modifying or adding new networks, ensuring secure and consistent connectivity.

wifi configuration

Global HTTP Proxy

Enter the host name, port, and add excluded hosts to enforce traffic routing through a proxy.

Workspace Security

  • Share Documents – Enable or Disable sharing documents from unmanaged apps to the work profile.

  • Allow Cut/Copy/Paste in Work Profile – Allow or Restrict Cut/Copy/Paste of data from the work profile to unmanaged apps.

  • Work Profile App Widgets – Allow or Prevent adding work profile app widgets to the home screen.

  • Connection Between Work Profile and Personal Space – Allow or Restrict apps to share data between the work profile and personal space.

Enterprise Factory Reset Protection (EFRP)

An email assigned to the device, required for access after a factory reset to ensure security.

Control over device functionalities such as:

  • Camera – Can be allowed or restricted.

  • Microphone – Can be allowed or restricted.

  • Screen Capture – Can be allowed or restricted.

  • Account Additions – Can be allowed or restricted.

  • Encryption – Can be allowed or restricted.

Security Settings

  • Restore Factory Settings – Can be allowed or restricted.

  • Developer Mode – Can be allowed or restricted.

  • Google Play Protect – Can be allowed or restricted.

Sync & Storage

  • SD Card – Can be allowed or restricted.

  • External USB Mass Storage – Can be allowed or restricted.

App Permissions

  • Install Unapproved Apps – Can be restricted.

  • Enable Play Store – Can be allowed or restricted.

  • Uninstalling Apps – Can be allowed or restricted.

  • Global App Permissions – Can be prompting user or denying permissions.

Network and Roaming Preferences

  • Configure VPN – Can be restricted or allowed.

  • Configure Wi-Fi – Can be restricted or allowed.

Tethering Options

  • Tethering – Can be allowed or restricted.

  • USB Tethering – Can be allowed or restricted.

Compliance

  • Password Policies – Enable or Disable Password Policies.

  • Encryption Policy – Enable or Disable Encryption Policies.

  • Factory Reset Disabled – Allow or Prevent device from being Factory Reset.

Personal Security

  • Camera – Enable or Disable Camera from taking pictures on personal profile.

  • Screen Capture – Enable or Disable Screen Capture on personal profile.

  • Personal Play Store Mode – Allow or Prevent adding applications from the Play Store on personal profile.

  • Blocked Apps – Prevent applications from being accessed on personal profile.

The policies mentioned below are for iOS devices.

iOS Policies:

ios Policies

Passcode

Enforce a passcode policy by specifying complexity requirements (simple or alphanumeric), enforcing PIN usage, setting maximum failed attempts, grace period, PIN history, minimum length, and inclusion of complex characters.

ios Passcode

Wi-Fi Configuration

Add specific approved networks, automatically connecting devices while restricting users from modifying or adding new networks, ensuring secure and consistent connectivity.

Global HTTP Proxy

Approve or restrict PAC fallback and captive login, then enter the proxy server, port, and credentials.

global http proxy

Control over device functionalities such as:

  • Camera – Can be allowed or restricted.

  • Video Conferencing – Can be allowed or restricted.

  • Screen Capture – Can be allowed or restricted.

  • Spotlight Internet Results – Can be allowed or restricted.

  • AirDrop – Can be allowed or restricted.

  • Chat – Can be allowed or restricted.

  • Assistant – Can be allowed or restricted.

  • Assistant while Locked – Can be allowed or restricted.

  • Device-Only Dictation – Can be allowed or restricted.

  • Device Name Modification – Can be allowed or restricted.

  • Air Print – Can be allowed or restricted.

  • Air Print Credentials Storage – Can be allowed or restricted.

  • Air Print Beacon Discovery – Can be allowed or restricted.

  • Air Print Trusted TLS – Can be allowed or restricted.

Security Settings:

  • Encrypted Backup – Can be allowed or restricted.

  • Enabling Restrictions – Can be allowed or restricted.

  • Passbook while Locked – Can be allowed or restricted.

  • Fingerprint for Unlock – Can be allowed or restricted.

  • Fingerprint Modification – Can be allowed or restricted.

  • Open from Managed to Un-Managed – Can be allowed or restricted.

  • Open from Un-Managed to Managed – Can be allowed or restricted.

Advanced Security:

  • UI Configuration Profile Installation – Can be allowed or restricted.

  • Account Modification – Can be allowed or restricted.

  • Untrusted TLS Prompt – Can be allowed or restricted.

  • Files Network Drive Access – Can be allowed or restricted.

  • Restricted USB Mode – Can be allowed or restricted.

  • Files USB Drive Access – Can be allowed or restricted.

  • Unpaired External Boot to Recover – Can be allowed or restricted.

  • Air Play Incoming Requests Pairing Password – Can be allowed or restricted.

  • Watch Wrist Detection – Can be allowed or restricted.

  • Paired Watch – Can be allowed or restricted.

  • Proximity Setup to New Device – Can be allowed or restricted.

  • Password Auto Fill – Can be allowed or restricted.

  • Authentication before Auto Fill – Can be allowed or restricted.

  • Password Sharing – Can be allowed or restricted.

  • Password Proximity Request – Can be allowed or restricted.

Apps:

  • App Installation – Can be allowed or restricted.

  • App Removal – Can be allowed or restricted.

  • App Purchases – Can be allowed or restricted.

  • Adding Game Center Friends – Can be allowed or restricted.

  • Game Center – Can be allowed or restricted.

  • iTunes – Can be allowed or restricted.

  • Podcasts – Can be allowed or restricted.

  • News – Can be allowed or restricted.

  • System App Removal – Can be allowed or restricted.

  • Notification Modification – Can be allowed or restricted.

Browser:

  • Safari – Can be allowed or restricted.

  • Safari Autofill – Can be allowed or restricted.

  • JavaScript – Can be allowed or restricted.

  • Popups – Can be allowed or restricted.

  • Force Fraud Warning – Can be allowed or restricted.

  • Safari Accept Cookies – Can be allowed or restricted.

Network & Roaming:

  • Bluetooth Modification – Can be allowed or restricted.

  • Bluetooth Sharing Modification – Can be allowed or restricted.

  • Force Wi-fi to allowed networks only – Can be allowed or restricted.

  • Force Wi-fi power on – Can be allowed or restricted.

  • Game Center – Can be allowed or restricted.

  • VPN Creation – Can be allowed or restricted.

  • Personal Hotspot Modification – Can be allowed or restricted.

  • eSIM Modification – Can be allowed or restricted.

  • NFC – Can be allowed or restricted.

iCloud:

  • Cloud Backup – Can be allowed or restricted.

  • Managed Apps Cloud Sync – Can be allowed or restricted.

  • Cloud Document Sync – Can be allowed or restricted.

  • Cloud Photo Library – Can be allowed or restricted.

  • Shared Stream – Can be allowed or restricted.

  • Cloud Keychain Sync – Can be allowed or restricted.

  • Enterprise Book Backup – Can be allowed or restricted.

  • Enterprise Book Metadata Sync – Can be allowed or restricted.

  • Cloud Private Relay – Can be allowed or restricted.

Privacy:

  • Find My Friends – Can be allowed or restricted.

  • Find My Friends Modification – Can be allowed or restricted.

  • Find My Device – Can be allowed or restricted.

  • Diagnostic Submission – Can be allowed or restricted.

  • Diagnostic Submission Modification – Can be allowed or restricted.

  • Force Limit Ad Tracking – Can be allowed or restricted.

  • Lock Screen Control Center – Can be allowed or restricted.

  • Lock Screen Today View – Can be allowed or restricted.

  • Lock Screen Notification View – Can be allowed or restricted.

  • Mail Privacy Protection – Can be allowed or restricted.

Time Settings

Can be allowed or restricted.

Keyboard Settings

Allow or Restrict auto lookup, predictive keyboard, auto correction, keyboard shortcuts, and dictation.

  • Definition Lookup – Can be allowed or restricted .

  • Predictive Keyboard – Can be allowed or restricted.

  • Auto Correction – Can be allowed or restricted.

  • Keyboard Shortcuts – Can be allowed or restricted.

  • Dictation – Can be allowed or restricted.

  • Device-Only Dictation – Can be allowed or restricted.

  • Device-Only Translation – Can be allowed or restricted.

App Notifications

Allow or restrict app notifications by entering the bundle identifier, controlling badges, CarPlay, lock screen, notification center, and sounds.

App Notifications

Mail

Allow or restrict Mail Drop and recent syncing. Enter details such as account name, type, email address, mail server authentication, host names, port numbers, and SSL settings for both incoming and outgoing servers.

Mail

mail 2

mail 3

Access Point Name

Allow or restrict APN settings, configure protocol options (IPv4, IPv6, or both), choose authentication type (PAP or CHAP), and enter the APN name and credentials.

Subscribed Calendars

Allow or restrict calendar subscriptions by entering the account name, description, credentials, SSL settings, and VPN UUID.

Calendar Sync

Allow or restrict sync by entering the host name, username, password, port, principal URL, SSL settings, and VPN UUID.

Contact Sync

Allow or restrict sync by entering the host name, username, password, port, principal URL, SSL settings, and VPN UUID.

Windows:

windows

Windows:

  • Always On Top – Can be allowed or restricted.

  • Show in Taskbar – Can be allowed or restricted.

  • Block Alt+F4 – Can be allowed or restricted.

Keyboard:

  • Block Ctrl Esc – Can be allowed or restricted.

  • Block Alt Tab – Can be allowed or restricted.

  • Block Windows Key – Can be allowed or restricted.

  • Block Ctrl Copy Paste – Can be allowed or restricted.

  • Block Print Screen – Can be allowed or restricted.

Screen:

  • Prevent Screen Sharing – Can be allowed or restricted.

  • Screen Capture Watermark – Can be allowed or restricted.

Network:

  • Allow VPN – Can be allowed or restricted.

Proxy Server:

  • Proxy URL – Type in Proxy URL.

  • Proxy Certificate – Upload Proxy Certificate, accepted file type “.cer”.

  • Once you’ve set the policy type to ‘Single App Kiosk,’ you can begin tailoring the policies to your needs.

  • The policies mentioned below is Single App Kiosk (Android & iOS).

Single App Kiosk(Android)

single App kiosk android

Passcode

Apply a passcode policy to the device or work profile, selecting low, medium, or high complexity. Set a limit on failed attempts before the device locks or data is wiped.

Wi-Fi Configuration

Add specific approved networks, automatically connecting devices while restricting users from modifying or adding new networks, ensuring secure and consistent connectivity.

Global HTTP Proxy

Enter the host name, port, and add excluded hosts to enforce traffic routing through a proxy.

Enterprise Factory Reset Protection (EFRP)

An email assigned to the device, required for access after a factory reset to ensure security.

Control over device functionalities such as:

  • Camera – Can be allowed or restricted.

  • Microphone – Can be allowed or restricted.

  • Screen Capture – Can be allowed or restricted.

  • Account Additions – Can be allowed or restricted.

  • Encryption – Can be allowed or restricted.

Security Settings:

  • Restore Factory Settings – Can be allowed or restricted.

  • Developer Mode – Can be allowed or restricted.

  • Google Play Protect – Can be allowed or restricted.

Sync & Storage:

  • SD Card – Can be allowed or restricted.

  • External USB Mass Storage – Can be allowed or restricted.

App Permissions:

  • Install Unapproved Apps – Can be restricted.

  • Enable Play Store – Can be allowed or restricted.

  • Uninstalling Apps – Can be allowed or restricted.

  • Global App Permissions – Can be prompting user or denying permissions.

Network and Roaming Preferences

  • Configure VPN – Can be restricted or allowed.

  • Configure Wi-Fi – Can be restricted or allowed.

Tethering Options:

  • Tethering – Can be allowed or restricted.

  • USB Tethering – Can be allowed or restricted.

Kiosk:

  • Allowed Apps (Only one) – Able to select a single app.

  • Device Settings – Can be allowed or restricted.

  • Power Button – Can be allowed or restricted.

  • Status Bar – Can be allowed or restricted or kept on system info only.

  • System Error Warnings – Can be allowed or restricted.

Compliance

  • Password Policies – Enable or Disable Password Policies.

  • Encryption Policy – Enable or Disable Encryption Policies.

  • Factory Reset Disabled – Allow or Prevent device from being Factory Reset.

Single App Kiosk(iOS)

single Appkiosk ios

Passcode

Apply a passcode policy to the device or work profile, selecting low, medium, or high complexity. Set a limit on failed attempts before the device locks or data is wiped.

Wi-Fi Configuration

Add specific approved networks, automatically connecting devices while restricting users from modifying or adding new networks, ensuring secure and consistent connectivity.

Global HTTP Proxy

Approve or restrict PAC fallback and captive login, then enter the proxy server, port, and credentials.

Control over device functionalities such as:

  • Camera – Can be allowed or restricted.

  • Video Conferencing – Can be allowed or restricted.

  • Screen Capture – Can be allowed or restricted.

  • Spotlight Internet Results – Can be allowed or restricted.

  • AirDrop – Can be allowed or restricted.

  • Chat – Can be allowed or restricted.

  • Assistant – Can be allowed or restricted.

  • Assistant while Locked – Can be allowed or restricted.

  • Device-Only Dictation – Can be allowed or restricted.

  • Device Name Modification – Can be allowed or restricted.

  • Air Print – Can be allowed or restricted.

  • Air Print Credentials Storage – Can be allowed or restricted.

  • Air Print Beacon Discovery – Can be allowed or restricted.

  • Air Print Trusted TLS – Can be allowed or restricted.

Security Settings:

  • Encrypted Backup – Can be allowed or restricted.

  • Enabling Restrictions – Can be allowed or restricted.

  • Passbook while Locked – Can be allowed or restricted.

  • Fingerprint for Unlock – Can be allowed or restricted.

  • Fingerprint Modification – Can be allowed or restricted.

  • Open from Managed to Un-Managed – Can be allowed or restricted.

  • Open from Un-Managed to Managed – Can be allowed or restricted.

Advanced Security:

  • UI Configuration Profile Installation – Can be allowed or restricted.

  • Account Modification – Can be allowed or restricted.

  • Untrusted TLS Prompt – Can be allowed or restricted.

  • Files Network Drive Access – Can be allowed or restricted.

  • Restricted USB Mode – Can be allowed or restricted.

  • Files USB Drive Access – Can be allowed or restricted.

  • Unpaired External Boot to Recover – Can be allowed or restricted.

  • Air Play Incoming Requests Pairing Password – Can be allowed or restricted.

  • Watch Wrist Detection – Can be allowed or restricted.

  • Paired Watch – Can be allowed or restricted.

  • Proximity Setup to New Device – Can be allowed or restricted.

  • Password Auto Fill – Can be allowed or restricted.

  • Authentication before Auto Fill – Can be allowed or restricted.

  • Password Sharing – Can be allowed or restricted.

  • Password Proximity Request – Can be allowed or restricted.

Browser:

  • Safari – Can be allowed or restricted.

  • Safari Autofill – Can be allowed or restricted.

  • JavaScript – Can be allowed or restricted.

  • Popups – Can be allowed or restricted.

  • Force Fraud Warning – Can be allowed or restricted.

  • Safari Accept Cookies – Can be allowed or restricted.

Network & Roaming:

  • Bluetooth Modification – Can be allowed or restricted.

  • Bluetooth Sharing Modification – Can be allowed or restricted.

  • Force Wi-fi to allowed networks only – Can be allowed or restricted.

  • Force Wi-fi power on – Can be allowed or restricted.

  • Game Center – Can be allowed or restricted.

  • VPN Creation – Can be allowed or restricted.

  • Personal Hotspot Modification – Can be allowed or restricted.

  • eSIM Modification – Can be allowed or restricted.

  • NFC – Can be allowed or restricted.

iCloud:

  • Cloud Backup – Can be allowed or restricted.

  • Managed Apps Cloud Sync – Can be allowed or restricted.

  • Cloud Document Sync – Can be allowed or restricted.

  • Cloud Photo Library – Can be allowed or restricted.

  • Shared Stream – Can be allowed or restricted.

  • Cloud Keychain Sync – Can be allowed or restricted.

  • Enterprise Book Backup – Can be allowed or restricted.

  • Enterprise Book Metadata Sync – Can be allowed or restricted.

  • Cloud Private Relay – Can be allowed or restricted.

Privacy

  • Find My Friends – Can be allowed or restricted.

  • Find My Friends Modification – Can be allowed or restricted.

  • Find My Device – Can be allowed or restricted.

  • Diagnostic Submission – Can be allowed or restricted.

  • Diagnostic Submission Modification – Can be allowed or restricted.

  • Force Limit Ad Tracking – Can be allowed or restricted.

  • Lock Screen Control Center – Can be allowed or restricted.

  • Lock Screen Today View – Can be allowed or restricted.

  • Lock Screen Notification View – Can be allowed or restricted.

  • Mail Privacy Protection – Can be allowed or restricted.

Time Settings

Can be allowed or restricted.

Keyboard Settings

Allow or Restrict auto lookup, predictive keyboard, auto correction, keyboard shortcuts, and dictation.

  • Definition Lookup – Can be allowed or restricted.

  • Predictive Keyboard – Can be allowed or restricted.

  • Auto Correction – Can be allowed or restricted.

  • Keyboard Shortcuts – Can be allowed or restricted.

  • Dictation – Can be allowed or restricted.

  • Device-Only Dictation – Can be allowed or restricted.

  • Device-Only Translation – Can be allowed or restricted.

Kiosk:

  • Allowed Apps (Only one) – Able to select a single app.

  • Auto Lock – Can be allowed or restricted.

  • Device Rotation – Can be allowed or restricted.

  • Ringer Switch – Can be allowed or restricted.

  • Sleep/Wake Button – Can be allowed or restricted.

  • Touch – Can be allowed or restricted.

  • Volume Buttons – Can be allowed or restricted.

  • Assistive Touch – Can be allowed or restricted.

  • Invert Colors – Can be allowed or restricted.

  • Mono Audio – Can be allowed or restricted.

  • Speak Selection – Can be allowed or restricted.

  • Voice Over – Can be allowed or restricted.

  • Zoom – Can be allowed or restricted.

  • Voice Control – Can be allowed or restricted.

Single App Kiosk (Windows):

Windows:

  • Always On Top – Can be allowed or restricted.

  • Show in Taskbar – Can be allowed or restricted.

  • Block Alt+F4 – Can be allowed or restricted.

Keyboard:

  • Block Ctrl Esc – Can be allowed or restricted.

  • Block Alt Tab – Can be allowed or restricted.

  • Block Windows Key – Can be allowed or restricted.

  • Block Ctrl Copy Paste – Can be allowed or restricted.

  • Block Print Screen – Can be allowed or restricted.

Screen:

  • Prevent Screen Sharing – Can be allowed or restricted.

  • Screen Capture Watermark – Can be allowed or restricted.

Network:

  • Allow VPN – Can be allowed or restricted.

Proxy Server:

  • Proxy URL – Type in Proxy URL.

  • Proxy Certificate – Upload Proxy Certificate, accepted file type “.cer”.

  • After setting the policy type to ‘Multi App Kiosk,’ you can start customizing the policies as needed.

  • The following policies apply to the Multi App Kiosk (Android & iOS) setup.

Multi App Kiosk (Android):

multipleApp kiosk Android

Passcode

Apply a passcode policy to the device or work profile, selecting low, medium, or high complexity. Set a limit on failed attempts before the device locks or data is wiped

Wi-Fi Configuration

Add specific approved networks, automatically connecting devices while restricting users from modifying or adding new networks, ensuring secure and consistent connectivity.

Global HTTP Proxy

Enter the host name, port, and add excluded hosts to enforce traffic routing through a proxy.

Enterprise Factory Reset Protection (EFRP)

An email assigned to the device, required for access after a factory reset to ensure security.

Control over device functionalities such as:

  • Camera – Can be allowed or restricted.

  • Microphone – Can be allowed or restricted.

  • Screen Capture – Can be allowed or restricted.

  • Account Additions – Can be allowed or restricted.

  • Encryption – Can be allowed or restricted.

Security Settings:

  • Restore Factory Settings – Can be allowed or restricted.

  • Developer Mode – Can be allowed or restricted.

  • Google Play Protect – Can be allowed or restricted.

Sync & Storage:

  • SD Card – Can be allowed or restricted.

  • External USB Mass Storage – Can be allowed or restricted.

App Permissions:

  • Install Unapproved Apps – Can be restricted.

  • Uninstalling Apps – Can be allowed or restricted.

  • Global App Permissions – Can be prompting user or denying permissions.

Network and Roaming Preferences

Can be allowed or restricted.

Tethering Options:

  • Tethering – Can be allowed or restricted.

  • USB Tethering – Can be allowed or restricted.

Kiosk:

  • Allowed Apps (Multiple) – Can be allowed or restricted.

  • Device Settings – Can be allowed or restricted.

  • Power Button – Can be allowed or restricted.

  • Status Bar – Can be allowed or restricted or kept on system info only.

  • System Error Warnings – Can be allowed or restricted.

Multi App Kiosk (iOS):

multi App kiosk IOS

Passcode

Apply a passcode policy to the device or work profile, selecting low, medium, or high complexity. Set a limit on failed attempts before the device locks or data is wiped.

Wi-Fi Configuration

Add specific approved networks, automatically connecting devices while restricting users from modifying or adding new networks, ensuring secure and consistent connectivity.

Global HTTP Proxy

Approve or restrict PAC fallback and captive login, then enter the proxy server, port, and credentials.

Control over device functionalities such as:

  • Camera – Can be allowed or restricted.

  • Video Conferencing – Can be allowed or restricted.

  • Screen Capture – Can be allowed or restricted.

  • Spotlight Internet Results – Can be allowed or restricted.

  • AirDrop – Can be allowed or restricted.

  • Chat – Can be allowed or restricted.

  • Assistant – Can be allowed or restricted.

  • Assistant while Locked – Can be allowed or restricted.

  • Device-Only Dictation – Can be allowed or restricted.

  • Device Name Modification – Can be allowed or restricted.

  • Air Print – Can be allowed or restricted.

  • Air Print Credentials Storage – Can be allowed or restricted.

  • Air Print Beacon Discovery – Can be allowed or restricted.

  • Air Print Trusted TLS – Can be allowed or restricted.

Security Settings:

  • Encrypted Backup – Can be allowed or restricted.

  • Enabling Restrictions – Can be allowed or restricted.

  • Passbook while Locked – Can be allowed or restricted.

  • Fingerprint for Unlock – Can be allowed or restricted.

  • Fingerprint Modification – Can be allowed or restricted.

  • Open from Managed to Un-Managed – Can be allowed or restricted.

  • Open from Un-Managed to Managed – Can be allowed or restricted.

Advanced Security:

  • UI Configuration Profile Installation – Can be allowed or restricted.

  • Account Modification – Can be allowed or restricted.

  • Untrusted TLS Prompt – Can be allowed or restricted.

  • Files Network Drive Access – Can be allowed or restricted.

  • Restricted USB Mode – Can be allowed or restricted.

  • Files USB Drive Access – Can be allowed or restricted.

  • Unpaired External Boot to Recover – Can be allowed or restricted.

  • Air Play Incoming Requests Pairing Password – Can be allowed or restricted.

  • Watch Wrist Detection – Can be allowed or restricted.

  • Paired Watch – Can be allowed or restricted.

  • Proximity Setup to New Device – Can be allowed or restricted.

  • Password Auto Fill – Can be allowed or restricted.

  • Authentication before Auto Fill – Can be allowed or restricted.

  • Password Sharing – Can be allowed or restricted.

  • Password Proximity Request – Can be allowed or restricted.

Browser:

  • Safari – Can be allowed or restricted.

  • Safari Autofill – Can be allowed or restricted.

  • JavaScript – Can be allowed or restricted.

  • Popups – Can be allowed or restricted.

  • Force Fraud Warning – Can be allowed or restricted.

  • Safari Accept Cookies – Can be allowed or restricted.

Network & Roaming:

  • Bluetooth Modification – Can be allowed or restricted.

  • Bluetooth Sharing Modification – Can be allowed or restricted.

  • Force Wi-fi to allowed networks only – Can be allowed or restricted.

  • Force Wi-fi power on – Can be allowed or restricted.

  • Game Center – Can be allowed or restricted.

  • VPN Creation – Can be allowed or restricted.

  • Personal Hotspot Modification – Can be allowed or restricted.

  • eSIM Modification – Can be allowed or restricted.

  • NFC – Can be allowed or restricted.

iCloud:

  • Cloud Backup – Can be allowed or restricted.

  • Managed Apps Cloud Sync – Can be allowed or restricted.

  • Cloud Document Sync – Can be allowed or restricted.

  • Cloud Photo Library – Can be allowed or restricted.

  • Shared Stream – Can be allowed or restricted.

  • Cloud Keychain Sync – Can be allowed or restricted.

  • Enterprise Book Backup – Can be allowed or restricted.

  • Enterprise Book Metadata Sync – Can be allowed or restricted.

  • Cloud Private Relay – Can be allowed or restricted.

Privacy:

  • Find My Friends – Can be allowed or restricted.

  • Find My Friends Modification – Can be allowed or restricted.

  • Find My Device – Can be allowed or restricted.

  • Diagnostic Submission – Can be allowed or restricted.

  • Diagnostic Submission Modification – Can be allowed or restricted.

  • Force Limit Ad Tracking – Can be allowed or restricted.

  • Lock Screen Control Center – Can be allowed or restricted.

  • Lock Screen Today View – Can be allowed or restricted.

  • Lock Screen Notification View – Can be allowed or restricted.

  • Mail Privacy Protection – Can be allowed or restricted.

Time Settings

Can be allowed or restricted.

Keyboard Settings

Allow or Restrict auto lookup, predictive keyboard, auto correction, keyboard shortcuts, and dictation.

  • Definition Lookup – Can be allowed or restricted.

  • Predictive Keyboard – Can be allowed or restricted.

  • Auto Correction – Can be allowed or restricted.

  • Keyboard Shortcuts – Can be allowed or restricted.

  • Dictation – Can be allowed or restricted.

  • Device-Only Dictation – Can be allowed or restricted.

  • Device-Only Translation – Can be allowed or restricted.

Kiosk:

  • Allowed Apps (Multiple) – Able to select multiple apps.

    💡

    After completing this group segment in the Standard (BYOD/Fully Managed), Single App, and Multi App Kiosk section, proceed to the Alias & Routing section under VPN Connection.

    Once all configurations are finalized, return to the segment below to continue.

Multi App Kiosk (Windows):

Windows:

  • Always On Top – Can be allowed or restricted.

  • Show in Taskbar – Can be allowed or restricted.

  • Block Alt+F4 – Can be allowed or restricted.

Keyboard:

  • Block Ctrl Esc – Can be allowed or restricted.

  • Block Alt Tab – Can be allowed or restricted.

  • Block Windows Key – Can be allowed or restricted.

  • Block Ctrl Copy Paste – Can be allowed or restricted.

  • Block Print Screen – Can be allowed or restricted.

Screen:

  • Prevent Screen Sharing – Can be allowed or restricted.

  • Screen Capture Watermark – Can be allowed or restricted.

Network:

  • Allow VPN – Can be allowed or restricted.

Proxy Server:

  • Proxy URL – Type in Proxy URL.

  • Proxy Certificate – Upload Proxy Certificate, accepted file type “.cer”.

Last updated on
Secure ConnectAlias & Routing