Description
An Apple Account is the account used to access Apple services like the App Store, Apple Music, iCloud, iMessage, FaceTime, and more. This account can be used to sign in to all Apple services with a single Apple Account and password.
This article explains how to restrict user access to Apple Accounts logins for iOS and macOS devices using a Jamf School configuration profile.
Note - this restriction will grey out the Apple Account pane on the device. If there is an Apple Account logged in prior to applying the restrictions below, the options will prevent logout of the Apple Account as well.
Restricting User Access to Apple Accounts
For iOS Devices
In Jamf School, go to Profiles > Overview and click Create Profile.
Select iOS and Device Enrollment, and then click Next.
Name the profile and click Next. Then click Finish.
Click on the Restrictions payload and click Configure.
Uncheck the box for Allow modifying account settings (E-mail, contacts, calendars, iCloud & iTunes Store.
Click Scope and use the + button to add desired groups to the scope.
Click Save.
For macOS Devices
In Jamf School, go to Profiles > Overview and click Create Profile.
Select iOS and Device Enrollment, and then click Next.
Name the profile and click Next. Then click Finish.
Click on the Restrictions payload and click Configure.
Under Preferences select the checkbox for Restrict items.
Configure one of the options below:
Select Disable selected system settings extensions for macOS 13+ (or Disable selected preferences for macOS 12 or earlier) and then select Apple Account.
Select Enable selected preferences option and do not select Apple Account.
Click Scope and use the + button to add desired groups to the scope.
Click Save.
More Resources
For more information on Apple Account usage, see: