Managing Restrictions for Apple Intelligence, iOS/iPadOS 18 and macOS 15 Features via MDM

With new OS updates introducing AI-driven Apple Intelligence features, enterprises may restrict these features to align with privacy policies, while schools may disable certain capabilities to ensure focus on educational use. Configuring these restrictions via MDM helps maintain compliance and control across managed devices.

Apple Intelligence Features

These features can be restricted to maintain control over device functionality:

iOS/iPadOS Apple Intelligence Features 

• Image Playground
• Writing Tools
• Generating Text in User's Handwriting
• Image Wand
• Genmoji Creation
• Extending Apple Intelligence with ChatGPT (found under Settings > Siri & Search > Extend Apple Intelligence & Siri)
• Sign-in to extensions (iOS 18.2)
• Allowed workspace ID (iOS 18.3)
• Mail summary (iOS 18.1)
• Notes transcription summary (iOS 18.3)
• Visual intelligence summary (iOS 18.3)
• Apple intelligence report (iOS 18.4)
• Mail smart reply (iOS 18.4)
• Safari web page summary (iOS 18.4)

macOS Apple Intelligence Features 

• Image Playground
• Writing Tools
• Sign-in to extensions (macOS 15.2)
• Allowed workspace ID (macOS 15.3)
• Mail summary (macOS 15.1)
• Notes transcription summary (macOS 15.3)
• Apple intelligence report (macOS 15.4)
• Mail smart reply (macOS 15.4)
• Safari web page summary (macOS 15.4)

Note: These features were introduced in iOS/iPadOS 18.0 and macOS Sequoia (15.0).

iOS/iPadOS 18 and 18.1 Features

These iOS 18/18.1 features can be restricted to enhance data security and prevent unauthorized access:

• iPhone Mirroring: Prevents display replication from iPhone to Mac.
• eSIM Outgoing Transfers: Prevents eSIM transfers from managed devices to other devices.

Steps to Apply Restrictions

• Log in to the MDM Console and navigate to Device Management > Profiles.
• Create or select a profile for iOS/iPadOS or macOS.
• The configuration file will be provided in a later section of this document.
• After downloading, upload the configuration file, verifying that it contains all required restrictions 



• Publish and distribute the profile to target devices to enforce the restrictions.

Apply Restrictions using the Configuration File

• Download the configuration file and open it in a text editor/Notepad, or copy and paste the code below into a text editor/Notepad to apply restrictions for Apple Intelligence Services, iPhone Mirroring, ChatGPT Integration, and eSIM Transfers.

         <?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
	<key>PayloadContent</key>
	<array>
		<dict>
			<key>PayloadDisplayName</key>
			<string>AI Restrictions</string>
			<key>PayloadIdentifier</key>
			<string>com.apple.applicationaccess.16542AF3-4905-4F27-BBD6-D5E626A18132</string>
			<key>PayloadType</key>
			<string>com.apple.applicationaccess</string>
			<key>PayloadUUID</key>
			<string>16542AF3-4905-4F27-BBD6-D5E626A18132</string>
			<key>PayloadVersion</key>
			<integer>1</integer>
			<!-- <key>allowGenmoji</key>
			<false/> --> 
			<!-- <key>allowImagePlayground</key>
			<false/> -->
			<!-- <key>allowImageWand</key>
			<false/> -->
			<!-- <key>allowPersonalizedHandwritingResults</key>
			<false/> -->
			<!-- <key>allowWritingTools</key>
			<false/> -->
            <!-- <key>allowiPhoneMirroring</key>
			<false/> -->
            <!-- <key>allowESIMOutgoingTransfers</key>
			<false/>  -->
			<!-- <key>allowExternalIntelligenceIntegrations</key>
			<false/> -->
			<!-- <key>allowExternalIntelligenceIntegrationsSignIn</key>
			<false/> -->
			<!-- <key>allowedExternalIntelligenceWorkspaceIDs</key>
			<array>
				<string>com.manageengine.workspace_id</string>
			</array> -->
			<!-- <key>allowMailSummary</key>
			<false/> -->
			<!-- <key>allowNotesTranscriptionSummary</key>
			<false/> -->
			<!-- <key>allowVisualIntelligenceSummary</key>
			<false/> -->
			<!-- <key>allowAppleIntelligenceReport</key>
			<false/> -->
			<!-- <key>allowMailSmartReplies</key>
			<false/> -->
			<!-- <key>allowSafariSummary<key>
			<false/> -->
		</dict>
	</array>
	<key>PayloadDisplayName</key>
	<string>AI Restrictions</string>
	<key>PayloadIdentifier</key>
	<string>ai.32AC716C-3E55-4EE4-9CCB-F9560C3E625E</string>
	<key>PayloadScope</key>
	<string>System</string>
	<key>PayloadType</key>
	<string>Configuration</string>
	<key>PayloadUUID</key>
	<string>32AC716C-3E55-4EE4-9CCB-F9560C3E625E</string>
	<key>PayloadVersion</key>
	<integer>1</integer>
</dict>
</plist>

• Save the updated file with a .mobileconfig extension.
• Go to Device Mgmt > Profiles > Create iOS/iPadOS Profile > Custom Configuration profile to upload the downloaded file. Follow the steps mentioned above to better understand how to apply the restrictions.

If you have any doubts or need assistance, contact support at:

• On-Premises: mdm-support@manageengine.com
• Cloud: mdmcloud-support@manageengine.com