This guide details how administrators can configure device restrictions at the profile level within the Mobile Guardian Dashboard to enforce endpoint security and privacy policies.
Configuring Profile Restrictions
- Select Profiles from the left-hand navigation panel and click the Edit (Pencil) icon next to your target profile.
- Navigate to the What tab on the profile configuration screen.
- Click the Restrictions icon to open the security settings menu.
Cross-Platform Restriction Parameters
The following privacy and security settings can be applied globally across all supported operating systems:
- Disable Camera: Restricts application access to hardware cameras.
- Hide Location: Blocks location services and real-time positioning data.
- Hide SSID: Conceals connected Wi-Fi network identifiers from the user interface.
OS-Specific Security Settings
Android
- Settings & Access: Disable access to system settings and disable 3rd-party browsers.
- Connectivity: Configure Wi-Fi state (Force Wi-Fi On, Force Wi-Fi Off, or User's Choice).
- Enterprise Management: Enterprise Mobility Management (EMM) settings and Android Management API (AMA) Zero-Touch enrollment configurations.
iOS (Supervised)
- System & Hardware Controls: AirPrint, Turn Bluetooth On/Off, and prevent sign-out of the Mobile Guardian application.
- Application & Content Blocking: Block application installation and removal, Safari, Cloud services, Files application connectivity, and Media services.
- Access & Privacy Controls: Block Device Modification, explicit content, Sharing, Social platforms, spending, system preferences, and voice/text assistants.
- Security & Classroom Management: Classroom integration settings, Lock Down Privacy, and Lock Down Security.
macOS
- Application & Media Controls: Block application installation and removal, Safari, Cloud services, and Media services.
- Access Restrictions: Block Sharing, Social platforms, system preferences, and voice/text assistants.
- System Hardening: Lock Down Security.
Windows
- System Lockdown & Policies: Application Control, Hardware restrictions, System Lockdown, and Shared PC / Session parameters.
- Security & Maintenance: Privacy & Junk Removal, Web & File Safety, Idle & Passwords, and Delivery Optimisation.
- Administrative Controls: Disable Microsoft Store, Windows Update policies, Exam Mode (Take a Test), Bloatware mitigation, and custom OMA-URI CSP configurations
Supervised iOS devices running later versions offer the most additional restrictions. The restrictions apply only to supervised iOS devices and versions are identifiable on the screen.
Fallback Hierarchy: If explicit restrictions are not defined for iOS or macOS within an active Conditional profile, the system automatically falls back to the rules configured in your Configuration Profile. Maintaining explicit privacy controls in the Configuration Profile is essential for safeguarding all enrolled enterprise assets.