Learn more about the available macOS Configurations.
Workspace ONE UEM offers the ability to utilize devices in your mobile fleet as kiosks. Kiosks limit your users to a single website browsing and to specific applications. For example, a retail establishment can deploy devices in device kiosk mode for use in store, utilizing corporate applications for in-store functionality like querying inventory and checking product pricing as well as custom branding to enhance the kiosk functionality.
A kiosk is configured from individual profiles. To build a kiosk, create profiles in the UEM console, and then let the device handle the configuration of a kiosk profile. Use device kiosks to remotely configure allowed applications, desktop wallpapers, allow widgets, specify websites and create other restrictions.
Finder and Dock profile configuration is required in order to lock the file system and manage system commands. Configure these profiles in the UEM console.
Configure the Dock profile
Configure the Finder profile.
To use Kiosk mode effectively, enable additional profiles in the UEM console.
Configure profiles to control web browsing. Create a content filter within the Parental Controls profile and a list of allowed websites. These sites show up as Bookmarks in the Safari browser.
Optionally, use the Global HTTP Proxy profile to limit network access.
Customize a Restrictions profile to match your control Preferences, widgets and more.
Apply Media restrictions to prevent mounting of external drives. This prohibits USB or external storage devices from connecting and transferring files. Additionally, deactivate AirDrop functionality.
Apply Desktop restrictions to lock wallpaper on the desktop and allow for the configuration of default wallpaper
Time Limits and Schedules
Create a device curfew in the Parental Controls profile to limit use to operating hours.
Accommodate all users by configuring settings for enhanced vision, hearing, and keyboard and mouse interactions to further improve the usability of the kiosk.
Apple AirPlay allows administrators to mirror screens from a macOS computer or tvOS on the same subnet. If an end user needs assistance, simply send an AirPlay request to share your screen with an end user's computer running macOS Yosemite or higher.
Available to the devices running iOS 7 and later, the UEM console provides a means to upload fonts and install them onto devices.
Installing specific fonts allows users to view and read text that is not supported by standard means. Compatible font file types include .ttf or .otf. There is no limit to the number of fonts you install on devices, and you can remove a font at any time.
Manage Fonts on macOS Devices
Manage fonts by installing, deploying, and deleting them through the UEM console at any time.
Product provisioning enables you to create, through Workspace ONE ™ UEM, products containing profiles, applications, files/actions, and event actions (depending on the platform you use).
These products follow a set of rules, schedules, and dependencies as guidelines for ensuring your devices remain up-to-date with the content they need.
Product provisioning also encompasses the use of relay servers. These servers are FTP(S) servers designed to work as a go-between for devices and the UEM console. Create these servers for each store or warehouse to store product content for distribution to your devices.
For more information on using product provisioning with macOS devices, see the Product Provisioning for macOS Guide.
Workspace ONE Assist, previously named Advanced Remote Management (ARM), allows you to connect remotely to end-user devices so you can help with troubleshooting and maintenance. Assist requires your macOS device and the end-user device to connect to the Assist Server to facilitate communication between the Workspace ONE UEM console and the end-user device.
For more information, see VMware Workspace ONE Assist Documentation on docs.vmware.com.