You can create a restrictions profile in to ensure specific apps and settings are restricted on student and staff devices.

Configuring a Restrictions Profile

  1. In Jamf School, navigate to Profiles in the sidebar.
  2. Click + Create Profile.
  3. Select the operating system you want to make the profile for or select Upload Custom Profile.
  4. Select the type of enrollment you want to make the profile for.
  5. Enter a name in the Profile name field and configure the additional settings as needed, including the removal policy and time filter.
  6. Click Finish.
  7. To configure the profile settings, click the profile you want to configure.
  8. Use the Scope payload to configure the scope of the profile by clicking the + icon and adding device groups to the profile scope.
  9. Use the Restrictions payload to configure basic settings, including the allowed functionality and media content.
  10. (Optional) To prevent users from disabling Bluetooth, deselect the Allow modifications to Bluetooth settings (including pairing new devices) checkbox.
  11. (Optional) To defer software updates, select the Defer software updates for checkbox and enter the number of days to defer the software update.
  12. (Optional) To prevent users from installing apps from untrusted sources, deselect the Allow trusting new enterprise app authors checkbox.

    This setting does not remove apps that have already been installed. This will also affect trusting your own enterprise apps, so make sure this option is enabled when you install enterprise apps.

  13. Click Save.