Additional macOS Configurations

Learn more about the available macOS Configurations.

Kiosks for macOS Devices

Workspace ONE UEM offers the ability to utilize devices in your mobile fleet as kiosks. Kiosks limit your users to a single website browsing and to specific applications. For example, a retail establishment can deploy devices in device kiosk mode for use in store, utilizing corporate applications for in-store functionality like querying inventory and checking product pricing as well as custom branding to enhance the kiosk functionality.

A kiosk is configured from individual profiles. To build a kiosk, create profiles in the UEM console, and then let the device handle the configuration of a kiosk profile. Use device kiosks to remotely configure allowed applications, desktop wallpapers, allow widgets, specify websites and create other restrictions.

Build a Device Kiosk for a macOS Device

Finder and Dock profile configuration is required in order to lock the file system and manage system commands. Configure these profiles in the UEM console.

Configure the Dock profile

  • Allow specific applications and items to show on the Dock. By default, user adjustments are deactivated, but you can activate these adjustments as needed. Do not select any check boxes that would allow the user to make changes to the settings. Also, do not allow these settings to merge with the user dock. If you choose to override the Dock, it will not be reverted to its original state when the profile is removed or upon an enterprise wipe.

Configure the Finder profile.

  • Restrict access to the file system and commands using the Simple Finder and then choose commands to limit on the computer such as Shut Down. De-select the commands to make them unavailable to the user.

Additional macOS Profiles for Kiosk Mode

To use Kiosk mode effectively, enable additional profiles in the UEM console.

Safari browsing

Configure profiles to control web browsing. Create a content filter within the Parental Controls profile and a list of allowed websites. These sites show up as Bookmarks in the Safari browser.

Optionally, use the Global HTTP Proxy profile to limit network access.


Customize a Restrictions profile to match your control Preferences, widgets and more.

Apply Media restrictions to prevent mounting of external drives. This prohibits USB or external storage devices from connecting and transferring files. Additionally, deactivate AirDrop functionality.

Apply Desktop restrictions to lock wallpaper on the desktop and allow for the configuration of default wallpaper

Time Limits and Schedules

Create a device curfew in the Parental Controls profile to limit use to operating hours.


Accommodate all users by configuring settings for enhanced vision, hearing, and keyboard and mouse interactions to further improve the usability of the kiosk.

Mirror Screens with Apple AirPlay on macOS Devices

Apple AirPlay allows administrators to mirror screens from a macOS computer or tvOS on the same subnet. If an end user needs assistance, simply send an AirPlay request to share your screen with an end user's computer running macOS Yosemite or higher.

  1. Navigate to Devices > List Viewand select the device. The device summary screen appears.
  2. Select More > Support > Start AirPlay in the administrative menu bar. An AirPlay window appears.
  3. Select Add a Destination to start adding destinations to view. An Add New AirPlay Destination window appears.
  4. Configure the destination information including:
    • Destination Name – Friendly name for the device.
    • Destination AddressmacOS address of the device to view.
    • Password – Password for the destination.
    • Scan Time – Length of time that the device may search for the destination. The default value is 30 seconds.
    • Select the Set as Defaultcheck box to make the current destination the default destination. The next time AirPlay is used, the default destination appears as the Destination Name. It does not have to be entered again.
  5. Select Save and Start to send the AirPlay request to the device.
    • This destination is saved for the next request in the Destination Name drop-down menu.
  6. To Stop AirPlay on devices, navigate back to the UEM console. Go to Devices > List View > Select the Device > Support > More > Stop AirPlay.
  7. To edit an AirPlay destination:
    • Navigate to Devices > List View > Select Device > Support > More > AirPlay. An AirPlay window appears.
    • Choose the Device Destination to edit from the drop-down menu.
    • Select Edit to start editing the destination settings. An Edit AirPlay Destination window appears.
    • Select Save and Start to send the AirPlay request to the device.

Custom Fonts for macOS Devices

Available to the devices running iOS 7 and later, the UEM console provides a means to upload fonts and install them onto devices.

Installing specific fonts allows users to view and read text that is not supported by standard means. Compatible font file types include .ttf or .otf. There is no limit to the number of fonts you install on devices, and you can remove a font at any time.

Manage Fonts on macOS Devices

Manage fonts by installing, deploying, and deleting them through the UEM console at any time.

  1. Navigate to Devices > Device Settings > Apple > Install Fonts.
  2. Drag and drop a supported font file type (.ttf or .otf) onto the screen.
  3. Locate the font file and select Save to send the font to all the devices enrolled in the current organization group.
  4. Click the Image showing a delete button. button to delete a font.
  5. Click the Image showing view and export the XML file button. button to view and export the XML file.

Product Provisioning for macOS Devices

Product provisioning enables you to create, through Workspace ONE ™ UEM, products containing profiles, applications, files/actions, and event actions (depending on the platform you use).

These products follow a set of rules, schedules, and dependencies as guidelines for ensuring your devices remain up-to-date with the content they need.

Product provisioning also encompasses the use of relay servers. These servers are FTP(S) servers designed to work as a go-between for devices and the UEM console. Create these servers for each store or warehouse to store product content for distribution to your devices.

For more information on using product provisioning with macOS devices, see the Product Provisioning for macOS Guide.

Workspace ONE Assist

Workspace ONE Assist, previously named Advanced Remote Management (ARM), allows you to connect remotely to end-user devices so you can help with troubleshooting and maintenance. Assist requires your macOS device and the end-user device to connect to the Assist Server to facilitate communication between the Workspace ONE UEM console and the end-user device.

For more information, see VMware Workspace ONE Assist Documentation on

check-circle-line exclamation-circle-line close-line
Scroll to top icon