Supervised Config Presets

Tech Lockdown Team

|

Updated October 25, 2024

Configs are special files that can be installed on a supervised iPhone or iPad to reliably enforce certain settings and restrictions. We provide downloadable presets with recommended configurations that allow you to better enforce a Content Policy and control how the device is used.

One of the advantages of using our presets is that you can prevent them from being uninstalled, gating the ability to uninstall the config behind our profile locking feature .

Enforceable Settings

Installing any of the provided config presets will enforce and override the iPhone or iPad's settings based on what you specify.

Prevent Deleting Apps

Apps that already exist on the device will be enforced to prevent uninstallation.

This allows you to prevent the Cloudflare One VPN app from being deleted, which can be used to bypass a Content Policy.

Prevent New Apps

Disable the ability to add new apps to the device from the App Store or from the web.

It's possible to download apps that are used to bypass content filtering in the App Store, so this can be used to prevent that. This may not be necessary if you've added the following configs: Restrict New VPNs, Enforce Cloudflare Zero Trust VPN, Prevent App Uninstall.

Restrict New VPNs

Only allow existing VPNs to be used.

Prevent a user from bypassing a Content Policy by adding a conflicting VPN connection that overrides the Cloudflare Zero Trust VPN connection.

Enable Built-in Adult Content Filter

Force on Apple's built-in adult content filter and also disable private browsing in Safari.

Forcing on the built-in adult content filter will add an additional layer of content filtering alongside your Content Policy. It will also disable Safari private browsing, which can sometimes conflict with the Content Policy.

Prevent Hard Reset

Prevents the removal of Device Supervision and resetting device Settings and Apps back to their defaults.

Performing a Hard Reset of an iPhone could be used to remove content filtering settings and apps.

Prevent Turning Off WiFi

Force an iPhone to always connect to WiFi if available.

If your home router points to a Content Policy to filter online content, you can force an iPhone to always connect to WiFi instead of switching to 4G/5G internet. This is ideal when combined with a WiFi config that auto-connects to your Home WiFi.

Enforce Cloudflare Zero Trust VPN

Prevent deleting the Cloudflare VPN configuration in iPhone settings.

This removes the option to delete a currently active VPN connection in the iPhone's settings. Deleting a VPN connection is one way to bypass a Content Policy, so this can be used to prevent that. When combined with the Prevent Creating VPNs config, bypass prevention using conflicting VPN apps is effectively prevented.

Disable Cloud Private Relay

This feature can conflict with content filtering, so disabling can help prevent bypass unintentional bypass of a Content Policy.

Apple's Cloud Private Relay is a feature that can sometimes conflict with the Content Policy. This can be used to prevent that.

Disable Changing App Cellular Settings

Removes the ability to de-select cellular data for apps.

Prevents content filtering from being disabled while on cellular.

Next Up

You can control which apps are allowed to be accessed on the supervised device with App Allowlists and Blocklists:

Frequently Asked Questions

How do I find Supervised Config Presets on the Dashboard?

The can be found by going to Tools > iPhone / iPad > Restrictions.

Why doesn't the Config Preset I installed work on my iPhone?

These profiles require your iPhone device to be supervised . 

Can I install Config Presets on an iPad?

Yes, Supervised Config Presets can be installed on most iOS devices, including iPhones and iPads. 

Your iPad will need to be supervised .

How do I install a Config Preset?

Please see the guide below:

How do I enforce a config file to prevent it from being deleted?

Before you install the config file, you can use the Tech Lockdown dashboard to toggle an option to prevent uninstall.

Learn more in the install a config help doc .

How do I Uninstall or Remove a Config Preset from my iPhone?

Please see the guide below: