Apple Device Policy
Back to Explorer
GitHub YAMLApple Docs

Domains (com.apple.domains)

com.apple.domains

The payload that configures the domains under an organization's management.

iOS(8.0)macOS(10.10)visionOS(2.0)
Branch: release

Settings (10)

SettingTypeRequiredDefaultManual InstallSupported OS
Email domains
EmailDomains
An array of domains. Mail marks in red all email addresses that lack a suffix matching any of these strings.
1 subkey
arrayoptional—
✗No
└─
EmailDomainsItem
EmailDomainsItem
An email address.
stringrequired—
✓Yes
iOS (8.0+)macOS (10.10+)visionOS (2.0+)
Web domains
WebDomains
An array of domains. The system considers URLs matching the patterns listed in this property managed.
1 subkey
arrayoptional—
✗No
└─
WebDomainsItem
WebDomainsItem
string—
✓Yes
iOS (8.0+)macOS (10.10+)visionOS (2.0+)
Password autofill domains
SafariPasswordAutoFillDomains
An array of domains. Users can only save passwords in Safari from URLs matching the patterns listed here. This property doesn't disable the autofill feature itself. Supervised devices or Shared iPad need this property to enable saving passwords in Safari.
1 subkey
arrayoptional—
✓Yes
iOS (9.3+)
└─
SafariPasswordAutoFillDomainsItem
SafariPasswordAutoFillDomainsItem
string—
✓Yes
iOS (8.0+)macOS (10.10+)visionOS (2.0+)
Cross-site tracking prevention relaxed domains
CrossSiteTrackingPreventionRelaxedDomains
An array of up to 10 strings. URLs matching the patterns listed here have relaxed enforcement of cross-site tracking prevention.
1 subkey
arrayoptional—
✗No
iOS (16.2+)macOS (13.1+)
└─
CrossSiteTrackingPreventionRelaxedDomainItem
CrossSiteTrackingPreventionRelaxedDomainItem
string—
✓Yes
iOS (8.0+)macOS (10.10+)visionOS (2.0+)
Cross-site tracking prevention relaxed apps
CrossSiteTrackingPreventionRelaxedApps
An array of up to 10 strings representing app bundle-ids. Apps matching the bundle-ids listed here have relaxed enforcement of cross-site tracking prevention for the domains listed in `CrossSiteTrackingPreventionRelaxedDomains`.
1 subkey
arrayoptional—
✗No
iOS (18.0+)macOS (15.0+)
└─
CrossSiteTrackingPreventionRelaxedAppsItem
CrossSiteTrackingPreventionRelaxedAppsItem
string—
✓Yes
iOS (8.0+)macOS (10.10+)visionOS (2.0+)

Apple MDM & DDM Policy Explorer

Explore the full catalogue of Apple Mobile Device Management (MDM) and Declarative Device Management (DDM) policies for macOS and iOS. Search, filter, and reference policy keys for use with Microsoft Intune, Jamf, or any standards-compliant MDM solution.

Reference: policy categories & common keys

Policy categories

  • Configuration Profile
  • Declarative Configuration
  • Declarative Activation
  • Declarative Asset
  • Declarative Management

Common policy keys

  • com.apple.wifi.managed – Wi-Fi network configuration
  • com.apple.vpn.managed – VPN configuration
  • com.apple.applicationaccess – App and feature restrictions
  • com.apple.security.pkcs1 – Certificate (PKCS#1) payload
  • com.apple.security.pkcs12 – Identity certificate (PKCS#12) payload
  • com.apple.security.scep – SCEP certificate enrolment
  • com.apple.mail.managed – Mail account configuration
  • com.apple.eas.account – Exchange ActiveSync account
  • com.apple.MCX – Managed Client (macOS) preferences
  • com.apple.MCX.FileVault2 – FileVault 2 disk encryption
  • com.apple.dock – macOS Dock configuration
  • com.apple.screensaver – Screensaver configuration
  • com.apple.loginwindow – macOS login window configuration
  • com.apple.systempolicy.managed – Gatekeeper / system policy
  • com.apple.systempreferences – System Preferences pane restrictions
  • com.apple.SoftwareUpdate – Software update behaviour
  • com.apple.TCC.configuration-profile-policy – Privacy Preferences Policy Control (PPPC)
  • com.apple.notificationsettings – Per-app notification settings
  • com.apple.webcontent-filter – Web content filter
  • com.apple.dnsSettings.managed – DNS settings (DoH / DoT)
  • com.apple.relay.managed – Network relay configuration
  • com.apple.extensiblesso – Extensible Single Sign-On
  • com.apple.configuration.passcode.settings – DDM: passcode policy
  • com.apple.configuration.softwareupdate.enforcement.specific – DDM: enforced software update
  • com.apple.configuration.services.configuration-files – DDM: service configuration files
  • com.apple.configuration.management.status-subscriptions – DDM: status subscriptions
  • com.apple.activation.simple – DDM: simple activation predicate
  • com.apple.management.organization-info – DDM: organization information