Here are the key features of Policy-iOS/iPadOS - Block App Installation/Upgrade:

• Purpose: Implement and enable the iOS/iPadOS Application Block Policy to address concerns about data/IP loss, especially on mobile phones.

• Functionality:

  • Allows administrators to block the installation or launching of specific apps on supervised iOS/iPadOS devices by specifying their bundle IDs (e.g., com.apple.webapp, com.google.ios.youtube).

  • The policy does not work on BYOD (Bring Your Own Device) devices due to Apple API limitations—blocking, deleting, or installing apps is only supported on supervised devices.

  • Blocking system apps (like the App Store) may disable other device functionalities.

  • Removing the block policy requires a device reboot for the changes to take effect.

• Scenarios:

  • Assigning the block policy to a supervised device successfully blocks specified apps.

  • Assigning the policy to a BYOD device does not enforce the block.

  • Removing the policy should restore access to previously blocked apps after a reboot.

  • Blocking system apps can have side effects.

• Related Documentation:

  • iOS/iPadOS Application Block Policy

  • macOS/iOS/iPadOS MDM Security Features and Settings