Apple lets admin whitelist apps with iOS 9.3

Apple is adding new mobile device management options to iOS 9.3, which include the ability to create lists of apps that users can or cannot run. Administrators can also remotely adjust the layout of apps and folders on the home screen.

The changes in iOS 9.3 are in the “Configuration Profile Reference” document, which Apple recently updated. In this document, Apple describes the management capabilities for iOS and OS X for enterprise and educational institutions. Among other things, the Home Screen Layout Payload can be adjusted from iOS 9.3. This payload defines the layout of apps, folders, and website shortcuts on the home screen. Earlier on Reddit it was mentioned that the possibility was introduced to remove the default apps, including those of Apple itself, from the home screen. This requires an iOS device to run in supervised mode via the Apple Configurator 2.2 beta. That is an OS X program to manage and set up iOS devices.

With the Restrictions Payload there will be options to compile lists of apps that may not be displayed or launched on iOS devices within an organization, or that can be launched alone. You can also set whether the notification settings may be adjusted in this section.

The document also shows that administrators are given the option to adjust the text on the login and lock screen, for example to indicate in a request that a found device can be sent back to an organization. Finally, management options for educational configurations are described, such as which students or classes are allowed to log in or use the Classroom app.

With iOS 9.3, Apple focuses to a large extent on schools and large companies. There will be a new Classroom app for teachers, which will allow them to launch applications on students’ iPads. It is also possible to see what students see on their screen and to manage user accounts. Enterprise users will be given the option, among other things, to link the use of Notes to a code or fingerprint.