When a device is locked into a single application using App Lock Mode, there is currently no convenient way to troubleshoot network connectivity issues if the device loses access to Wi-Fi or fails to connect to the configured network. In such scenarios, administrators or users may be unable to restore connectivity without performing a full device reset and re-enrollment, which can be time-consuming and disruptive. It would be beneficial to provide a mechanism that allows authorized users or administrators to temporarily exit App Lock Mode, or access limited device settings, for the purpose of configuring or troubleshooting Wi-Fi connectivity. This could be achieved through an administrator-defined password, recovery code, or another secure authentication method. Providing a secure Wi-Fi recovery option would significantly improve device manageability and reduce the need for device resets when network-related issues occur.

We noticed that the Asset Management API includes support for subscriptions for In App Purchases. Could you share the expected timeline for when this feature will be available for testing? https://developer.apple.com/documentation/devicemanagement/managing-subscriptions

We would like to enforce the use of Managed Apple IDs on company-owned devices. At the same time, users should be able to install free applications on their own without requiring administrators to deploy every app through MDM, as this creates additional administrative overhead. Why is this required? The primary objective is to ensure that company-owned devices are used only with corporate-managed accounts and to prevent corporate data from being synced, backed up, or transferred to employees' personal iCloud accounts. This helps protect organizational data and reduces the risk of company information remaining accessible after an employee leaves the organization or stops using the device. We are looking for a solution that enforces Managed Apple ID usage while still allowing users the flexibility to install free apps independently.

On applying the configuration profile(com.apple.applicationaccess - Restriction) with allowEraseContentAndSettings to false in iOS 15 device, the restriction is not imposed on supervised device. Can see restriction applied in Setting->General->VPN&Device management ->MDM profile-> Restriction. But on checking Setting->General->Reset Erase content and setting is shown. On clicking it the device has erased to factory setting. Have attached the mobileconfig and screenshots of the setting. <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>PayloadContent</key> <array> <dict> <key>PayloadDescription</key> <string>Configures restrictions</string> <key>PayloadDisplayName</key> <string>Restrictions</string> <key>PayloadIdentifier</key> <string>com.apple.applicationaccess.8DA3EB9B-3C9E-45C1-99BC-B2A900E55628</string> <key>PayloadType</key> <string>com.apple.applicationaccess</string> <key>PayloadUUID</key> <string>8DA3EB9B-3C9E-45C1-99BC-B2A900E55628</string> <key>PayloadVersion</key> <integer>1</integer> <key>allowEraseContentAndSettings</key> <false/> </dict> </array> <key>PayloadDisplayName</key> <string>ContentRestriction</string> <key>PayloadIdentifier</key> <string>C7A744A3-0738-43C9-B962-DEBAABE63F4E</string> <key>PayloadRemovalDisallowed</key> <false/> <key>PayloadType</key> <string>Configuration</string> <key>PayloadUUID</key> <string>4BED8AF1-F1AC-4D2D-8B29-A130453BECB9</string> <key>PayloadVersion</key> <integer>1</integer> </dict> </plist> ![]("https://developer.apple.com/forums/content/attachment/d6e05749-559e-4428-95ad-96f304f36049" "title=IMG_0004.PNG;width=1668;height=2224") ![]("https://developer.apple.com/forums/content/attachment/3d4644b6-c074-486c-8010-1b843dc78c77" "title=IMG_0003.PNG;width=1668;height=2224") ` ![]("https://developer.apple.com/forums/content/attachment/a940b74b-3de0-4b52-b086-5e1102cb6ece" "title=IMG_0002.jpg;width=1668;height=2224") ``