I have developer versions of 2 of my own apps running on my iPad under OS version 15.6.1. I would like to be able to check the expiry date of the provisioning profiles without going to my development computer and running Xcode. Web searches tell me to look in "Settings - General - Device Management" or "Settings - General - Profiles" or similar names of locations, but those don't seem to exist for this version.

I want to install Slack over multiple macOS via MDM, using Munki but I don't want the deployed Slack to update themselves: This is MDM's job to deploy new version when needed. This "An update on disabling Slack auto-updates" article gives a way using AutoUpdate key (as described in Slack's documentation ) that can be added to a *configuration profile*:

PayloadContent
    
      
        AutoUpdate
        
        PayloadDisplayName
        Slack Auto-Update Settings
        PayloadIdentifier
        com.tinyspeck.slackmacgap.7F10399D-8AE8-419F-B4BA-3F0A0E96E33C
        PayloadType
        com.tinyspeck.slackmacgap
        PayloadUUID
        0342513E-235C-4D59-9C01-3D3CBB65F5D0
        PayloadVersion
        1
      
    
    PayloadDisplayName
    Slack Auto-Update Settings
    PayloadIdentifier
    com.yourcompany.profile.6C5258EA-2E47-41B3-8ABB-C589A2E7B917
    PayloadOrganization
    Your Company
    PayloadType
    Configuration
    PayloadUUID
    463E5146-FF42-4909-9F4A-12A84E2EEF57
    PayloadVersion
    1

On my MDM, I've added this *PayloadContent* to the custom *Pkginfo* of the application for installing Slack (from Slack-4.44.60-macOS.dmg). Installation on macOSes works but when Slack launches it asks for admin credentials in order to install an update. What's the correct MDM way to deploy Slack with AutoUpdate=false so that it won't try to update itself?

In order to get a useful DNS over TLS server configuration on macOS, I imported a network profile. After having installed this network configuration file, I did not see any new entry in the Network Settings graphical user interface. Only in the terminal, I can see it seems to be active: profiles list [user[1] attribute: profileIdentifier: com.quad9.tsecuredecs.HASH] There are 1 user configuration profiles installed for 'user'. In all tutorials on how to remove custom Network profiles, I see it appears in the GUI (for example Can't delete NextDNS profile from macOS Network Preferences ). But in mine, there is nothing else than the default ones. ![Screenshot of Network settings showing only Wi-Fi, ProtonVPN, an Bluetooth PAN services ][2]

I was just looking through System Settings and found something I wasn't sure of. If you go to General > Device Management I have Oracle Virtualbox VM in a provisioning state and I have no idea why. I think I used Virtualbox in the past but I'm not sure what this is. Is it safe to delete it? Edit: Here is an image of the Device Management window - I don't have Virtualbox installed anymore so I'm not sure which version I was using that caused this issue although it was some time ago so is probably an older version. macOS version is 15.4. The machine is a Mac Studio M1 Max.

I need to get information about **System Device Profiles (MDM or enrollment)**, such as Details: Description, control the computer, Allows and other. But I need to get it from some *FileInfo* in order to write these info to my .txt file. I found the right information in **/Library/Application Support/com.Apple.TCC/MDMOverrides.plist** . But in new system Mac version these info is SIP protected, that's why I need to restart the PC in Recovery Mode and write the next console command: *csrutil disable* . I need to find an easier solution, which is approached with any version of system. I can also find the necessary information in System Preferences/Profiles in Details, so does it mean that the information is opened? Where can I find it? It can be no path in Privacy Preferences Policy Control. I have also known about console commands such as *profiles list* or *profiles show*/, but it isn't full info. I really need to read the full info about **all Mobile Device Management** profiles from some file in order to write in my own file and send to server, or something like this.

When connecting to public WiFi networks, I prefer to have more privacy and also want to be sure that really every network packet is encrypted1. You can achieve that by connecting to a VPN, for example. On an iPhone, you can only connect to a VPN if you already have an internet connection. Well, that's trivial and always the case, but on iPhone you have to connect to a WiFi first, to manually connect to a VPN afterwards. So there will be a short moment, where your apps (background sync etc.), will send the traffic without using a VPN. Furthermore, if you put your iPhone aside or lock it immediately, the WiFi will disconnect and thus the VPN will disconnect. If you unlock your iPhone again or your iPhone wants to perform some background synchronization, WiFi will reconnect, but VPN will not. Again, sensitive data might leak. **So, how can I make my iPhone automatically connect to a VPN when connecting to a WiFi?** ---------- 1Most data will be encrypted nowadays anyway, but: * there might be an app with security issues in their protocol * or there might be an app that just does not encrypt every data * or there might be encrypted data accompanied by unencrypted metadata

We still have an old macOS server with profile manager running, with a domain wildcard SSL certificate. After renewing the certificate, I checked that https: was working, and also that management profiles could be downloaded. Great! However, when setting up a new device, the device says that the certificate is invalid, and will not install the profile. Reverting back to the (soon to be expiring) old certificate, everything works fine. So, I'm at a loss for why this is happening. As far as I can tell, the root for both certs is the same. In fact, the CA which was provided by Digicert/Geotrust looks to be the same as last year's. I've exhausted my basic knowledge of "openssl" commands trying to spot any differences, to no avail. In testing, I see the same behavior in iOS16, iOS17, iOS18, macOS14, and macOS15. When using the expiring certificate, new devices can download the profile, but when using the newer certificate, errors occur. Also, with the newer certificate, all of the above devices are able to install profiles (manually, from the /mydevices URL). One interesting note, is that yesterday the error was "invalid certificate"; however, today, it just says "canceled" (iOS16). I read that ABM was having issues overnight, so this may be related. But, my trouble with new devices and the new certificate started over a week ago. PS - I'm not using profile manager because _I_ want to. But, feel free to add more reasons why it's a bad idea (as long as you try to help solve the original problem).

I want to configure Zoom’s setting by pushing the plist file to the device from MDM. After pushing the customized us.zoom.config.plist to my macOS device through MDM, I am able to find the plist file over /Library/Managed Preferences folder, but Zoom’s default behavior doesn’t change at all. I tried to restart my machine, reinstall the Zoom app, push different plist content, and none of these helped me to achieve my goal. Would you let me know if I missed anything? I also include the plist content below, please let me know if the format has any issues. Thank you in advance. PayloadContent PayloadDisplayName us.zoom.config.plist PayloadIdentifier us.zoom.config.F9953132-51DD-405B-9989-595CEF531A17 PayloadType us.zoom.config PayloadUUID F9953132-51DD-405B-9989-595CEF531A17 PayloadVersion 1 ZDisableVideo zDisableChat NoFacebook NoGoogle PayloadDisplayName us.zoom.config.plist PayloadIdentifier Wills-Macbook-Pro.F7329566-3114-452D-AF7C-3F03D825745E PayloadType Configuration PayloadUUID 35B0FD44-754C-4162-86BB-51B34A78110s5 PayloadVersion 2 You can install us.zoom.config.plist I attached above to /Library/Managed Preferences and watch if your Zoom app won’t turn on the camera automatically, disable the chat function, and disable FB/Google login.

This question applies to the mobile versions of Safari, either as proper content (for example, supporting a news story) or inline video ads. Mobile means iPadOS and iOS on the iPhone and iPad. The macOS version of this question doesn’t provide mobile solutions. Is there a way to disable auto play of video using a setting, configuration profile or third party app/content blocker?

I want to be able to force DoH on all networks (Wifi, cellular data, etc) except my home and work wifi network SSIDs. I used iMazing Profile Editor to craft this profile, but when I try to import it on to my iPhone 12 mini (iOS 16.1) it displays an error saying "The field 'OnDemandRules' is not valid." I've read through Apple's Configuration Payload documentation and can't see anything wrong, so I'm guessing there's just something I don't understand.

PayloadContent
	
		
			DNSSettings
			
				DNSProtocol
				HTTPS
				ServerAddresses
				
					185.228.168.168
					185.228.169.168
					2a0d:2a00:0001:0000:0000:0000:0000:0000
					2a0d:2a00:0002:0000:0000:0000:0000:0000
				
				ServerURL
				https://doh.cleanbrowsing.org/doh/family-filter/ 
			
			OnDemandRules
			
				Action
				Disconnect
				SSIDMatch
				
					eduroam
					AEROHIVE
				
			
			PayloadDisplayName
			DNS Settings #1
			PayloadIdentifier
			com.apple.dnsSettings.managed.50552866-1CD2-48AD-8117-EF6EF0CC0920
			PayloadType
			com.apple.dnsSettings.managed
			PayloadUUID
			12B12860-090C-4FE4-B1C4-F1BDC4741DF3
			PayloadVersion
			1
		
	
	PayloadDisplayName
	CleanBrowsing DoH
	PayloadIdentifier
	com.charlesrc019.CleanBrowsingDoH
	PayloadOrganization
	charlesrc019
	PayloadType
	Configuration
	PayloadUUID
	FF112954-D8A9-4C71-8868-9CEC20238482
	PayloadVersion
	1

Note: If I edit the profile and take the 'OnDemandRules' section out, it does work, but that doesn't work for what I'm trying to do. I need it to be able to switch between forcing DoH and not depending on what wifi network it is connected to. Also, I am unable to find an documentation saying that On Demand Rules only work for VPN settings not DNS. iMazing Profile Editor included On Demand Rules in their DNS settings, so I'm inclined to believe that it should work.

Is there a way to push an Apple ID to the iPads with profiles via Apple Configurator? I have several 100 and would like to push it so we do not have to enter it manually for each.

On our iPhones (a lot of test devices) we switch often between a plain network connection and a connection with a proxy. The normal flow require 1. Go to setting 2. Select wifi preference 3. enable proxy 4. type the proxy address Is there any way to "save" the proxy setting and enable/disable with a single button?

I'm trying to find out if it is possible on the iOS Developer Enterprise Program to remotely add a home screen bookmark to a website. For example: a user can visit a website and add a shortcut to that webpage to their home screen in Mobile Safari via the Share context menu and picking "Add to Homescreen". I want to be able to reproduce this remotely to all the devices under my control as a matter of automation. I understand that Apple have a Mobile Device Management Protocol (MDM) that can be used to install a configuration profile to devices. The documentation lists the following about configuration profiles: > A configuration profile contains a number of settings that you can > specify, including: > - Restrictions on device features - Wi-Fi settings - VPN settings - Email server settings - Exchange settings - LDAP directory service settings - CalDAV calendar service settings - Web clips Credentials and keys So there's nothing there about home screen configuration. Is there any way of remotely adding home screen bookmarks to iOS devices? ---------- *PS. I'm aware that a work around to this is to create a browser wrapper application and remotely push this app. However, that is not what I wish to do.*

I’m trying to configure iOS devices in mass. Unfortunately my team doesn’t have direct access to our company MDM, so enrollment through Configurator isn’t working. I had the idea to use internet sharing over usb to get devices on the network and avoid having to manually enter network credentials. However when I do this the connection to the activation server keeps timing out. Initially I thought it was something about the company network, but I get the same result when connecting the Mac to a cellular hotspot for Ethernet. I’ve tried deploying a profile with a different network, but it somehow gets embedded in the management profile and can’t be removed once the device becomes managed. I’ve also tried exiting Configurator to ensure it isn’t interfering with the communication. Has anyone been able to do this successfully? Any ideas of what could be interfering with communication to the Activation Server? Additional info: I just tested using a lightning to Ethernet adaptor on our corporate network. Taking the Mac out of the equation allowed the configuration to happen without any delays. Not sure what is impacting the traffic when it passes through the Mac.

I need to configure a bunch of iPads with the same settings. For instance, volume level, auto-lock, side-button, timezone and light level. Currently I'm doing this manually on each iPad through the Settings app in the device. This is both tedious and error-prone... I'm thinking it should be possible to create a master settings file or image file (or something) with the correct settings which could then be loaded on to each device. Is that possible? **Background:** We need deliver iPads preconfigured with our "kiosk" app for customers to place in their office/retail locations. For instance, disabling auto-lock is crucial here. Currently I have some 20-30 iPads that needs to be configured the same way.

Is there any application that would allow you to manage and configure your iPhone? (i.e. desktop screen, desktop folders, icon names, settings, etc.)

I configured a bunch of iPads at my previous job, and I had to do it one at a time. Granted, there were only like 6 of them, but I am wondering what I would do if I needed to configure a whole bunch of iDevices. I know at the Apple Store they apply updates on a bunch of them without taking them out of the package, so there must be some sort of way to do this.

I want to be able to one-click email links from apps such as Twitter, Safari and Instapaper. Is this possible if I'm using Gmail and not Apple's Mail app? Do I have to set Gmail as the default mail client? Is this possible?

My university has a 'configuration profile' to allow us to connect to the campus secure WiFi - which is great, save for that it forces us to have a passcode (which I neither like nor want). The profile is outdated, as the network now has it's own security on top of the connection, and so it's objective (to stop unauthorised people using the network) is moot. Is there any way to modify the configuration profile / read it's contents and write my own (it's unsigned anyway) to replace it?

I recently had my work MacBook Pro's admin software removed (by IT, the same department that initially set them up) and the macOS freshly installed, with the old profiles removed. I had a Time Machine backup of the computer and (maybe stupidly) restored the laptop's settings from this backup. The old profiles that were managed by IT have been removed, but there are still some "login items" that remain. My guess is that I "restored" these login items when restoring from the time machine backup. The login items say that "this setting has been configured by a profile" but when I look at "Profiles" in system settings I don't see any profiles. Assuming that I somehow reinstalled these items, how would I go about removing them?