Apple Device Policy
Back to Explorer
GitHub YAMLApple Docs

Mobile Accounts (com.apple.MCX)

com.apple.MCX

The payload that configures mobile accounts on the device.

macOS(10.7)
Branch: release

Settings (5)

SettingTypeRequiredDefaultManual InstallSupported OS
com.apple.cachedaccounts.CreateAtLogin
com.apple.cachedaccounts.CreateAtLogin
If `true`, the system creates the mobile account at login time.
booleanoptionalfalse
✓Yes
macOS (10.7+)
com.apple.cachedaccounts.WarnOnCreate
com.apple.cachedaccounts.WarnOnCreate
If `true`, the system asks the user whether to create the mobile account and it allows the user to not create it.
booleanoptionalfalse
✓Yes
macOS (10.7+)
cachedaccounts.WarnOnCreate.allowNever
cachedaccounts.WarnOnCreate.allowNever
If `true`, the system allows the user to stop the prompts about mobile account creation every time the user logs in. This key is only valid if `com.apple.cachedaccounts.WarnOnCreate` is `true`.
booleanoptionalfalse
✓Yes
macOS (10.7+)
cachedaccounts.expiry.delete.disusedSeconds
cachedaccounts.expiry.delete.disusedSeconds
The minimum number of seconds a mobile account can exist before the system makes an automatic attempt to remove the mobile account. Set to `0` to attempt removing it at the next login or logout. Set to `-1` to never attempt removing the mobile account.
integeroptional-1
✓Yes
macOS (10.7+)
cachedaccounts.askForSecureTokenAuthBypass
cachedaccounts.askForSecureTokenAuthBypass
If `true`, the system bypasses the secure token authorization dialog. This dialog only appears on APFS volumes.
booleanoptionalfalse
✓Yes
macOS (10.7+)

Apple MDM & DDM Policy Explorer

Explore the full catalogue of Apple Mobile Device Management (MDM) and Declarative Device Management (DDM) policies for macOS and iOS. Search, filter, and reference policy keys for use with Microsoft Intune, Jamf, or any standards-compliant MDM solution.

Reference: policy categories & common keys

Policy categories

  • Configuration Profile
  • Declarative Configuration
  • Declarative Activation
  • Declarative Asset
  • Declarative Management

Common policy keys

  • com.apple.wifi.managed – Wi-Fi network configuration
  • com.apple.vpn.managed – VPN configuration
  • com.apple.applicationaccess – App and feature restrictions
  • com.apple.security.pkcs1 – Certificate (PKCS#1) payload
  • com.apple.security.pkcs12 – Identity certificate (PKCS#12) payload
  • com.apple.security.scep – SCEP certificate enrolment
  • com.apple.mail.managed – Mail account configuration
  • com.apple.eas.account – Exchange ActiveSync account
  • com.apple.MCX – Managed Client (macOS) preferences
  • com.apple.MCX.FileVault2 – FileVault 2 disk encryption
  • com.apple.dock – macOS Dock configuration
  • com.apple.screensaver – Screensaver configuration
  • com.apple.loginwindow – macOS login window configuration
  • com.apple.systempolicy.managed – Gatekeeper / system policy
  • com.apple.systempreferences – System Preferences pane restrictions
  • com.apple.SoftwareUpdate – Software update behaviour
  • com.apple.TCC.configuration-profile-policy – Privacy Preferences Policy Control (PPPC)
  • com.apple.notificationsettings – Per-app notification settings
  • com.apple.webcontent-filter – Web content filter
  • com.apple.dnsSettings.managed – DNS settings (DoH / DoT)
  • com.apple.relay.managed – Network relay configuration
  • com.apple.extensiblesso – Extensible Single Sign-On
  • com.apple.configuration.passcode.settings – DDM: passcode policy
  • com.apple.configuration.softwareupdate.enforcement.specific – DDM: enforced software update
  • com.apple.configuration.services.configuration-files – DDM: service configuration files
  • com.apple.configuration.management.status-subscriptions – DDM: status subscriptions
  • com.apple.activation.simple – DDM: simple activation predicate
  • com.apple.management.organization-info – DDM: organization information