I made a policy for MacOS and enrolled a MacOS device. Some notable functionalities that I restricted in the policy are the camera and taking screenshot. The device I enrolled still has access to these functionalities even though its OS version meets the requirement in the policy. What could be the cause for this instance?

Hi,

In order to block the camera, assuming you are working with iOS 13 devices, the device needs to be in supervised mode. Sounds like you have blocked the camera from use under Device Settings which will only work for devices prior to iOS 13.

If above is met the setting is:

Policy - Supervised Settings - Restrictions & Network - Allow use of camera.

A number of functions are only available on supervised devices, full list:

https://support.apple.com/guide/mdm/supervised-restrictions-mdm54960f92a/web

Hope this helps

See now that you were referring to MacOS.

allowCamera

boolean

If false, disables the camera, and its icon is removed from the Home screen. Users are unable to take photographs. This restriction is deprecated on unsupervised devices and will be supervised only in a future release. Available in iOS 4 and later, and macOS 10.11 and later.

Default: true

This should work for supervised/non-supervised devices. Validate that the correct policy in fact is applied and report to IBM support if it still fails

Hi, I have looked into the link that you mentioned. I am looking for the possible cause that the restrictions in my policy are not working in MacOS laptops and hopefully I can get steps or procedures that will solve my issue. My issue is with a MacOS laptop device not an IOS device. Thank you.