Solutions updates 2026-03-12 (#41596)

2026-03-16 11:58:51 -05:00
parent 734b0177f1
commit ad9301a455
11 changed files with 271 additions and 0 deletions
@@ -0,0 +1,10 @@
+# Android Managed App Configurations
+
+## [Allow Work Profile Widgets](allow-work-profile-widgets-for-APPNAME.json)
+
+- Change `APPNAME` in the filename and the `"APPNAME Widget": "Allow Work Profile Widgets for APPNAME"` line in the file to the name of the app you'd like to allow Work Profile widgets for.
+- Scope this configuration to the app:
+  - UI: Software > Select the app > Actions > Edit configuration
+  - [GitOps](https://fleetdm.com/docs/configuration/yaml-files#app-store-apps): Under the `app_store_app` entry, add the path under the `configuration.path` for the app.
+- No need to add the identifier (i.e., `com.google.android.calendar` for Google Calendar) to the configuration. Fleet automatically takes care of this, since the config is scoped to the app.
+- [Learn more](https://fleetdm.com/guides/install-app-store-apps#configuration) about app configurations.
@@ -0,0 +1,7 @@
+{
+  "managedConfiguration": {
+    "APPNAME Widget": "Allow Work Profile Widgets for APPNAME",
+    "config": true
+  },
+  "workProfileWidgets": "WORK_PROFILE_WIDGETS_ALLOWED"
+}
@@ -0,0 +1 @@
+../../macos/configuration-profiles/block-apps.mobileconfig
@@ -0,0 +1,37 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+    <key>PayloadContent</key>
+    <array>
+        <dict>
+            <key>allowSimple</key>
+            <false/>
+            <key>forcePIN</key>
+            <true/>
+            <key>maxFailedAttempts</key>
+            <integer>10</integer>
+            <key>minLength</key>
+            <integer>6</integer>
+            <key>PayloadIdentifier</key>
+            <string>com.fleetdm.passwordpolicy</string>
+            <key>PayloadType</key>
+            <string>com.apple.mobiledevice.passwordpolicy</string>
+            <key>PayloadUUID</key>
+            <string>CD81A573-4FD3-4A63-B7B9-6651544E458A</string>
+            <key>PayloadVersion</key>
+            <integer>1</integer>
+        </dict>
+    </array>
+    <key>PayloadDisplayName</key>
+    <string>Passcode</string>
+    <key>PayloadIdentifier</key>
+    <string>com.fleetdm.passwordpolicy</string>
+    <key>PayloadType</key>
+    <string>Configuration</string>
+    <key>PayloadUUID</key>
+    <string>D1958A4A-2CBD-4076-89E9-2BC1AB026936</string>
+    <key>PayloadVersion</key>
+    <integer>1</integer>
+</dict>
+</plist>
@@ -0,0 +1 @@
+../../macos/configuration-profiles/restrictions.mobileconfig
@@ -0,0 +1,11 @@
+# macOS Configuration Profiles
+
+## [Password Policy](password-policy.mobileconfig)
+
+- It's best to combine this profile with the [Lock Screen](lock-screen.mobileconfig) config profile.
+
+
+## [Block Apps](block-apps.mobileconfig)
+
+- This blocks a several system apps, as well as Siri.
+- See Apple's documentation [for this profile](https://developer.apple.com/documentation/devicemanagement/restrictions) and app bundle identifiers for [iOS/iPadOS](https://support.apple.com/guide/deployment/bundle-ids-for-iphone-and-ipad-apple-apps-depece748c41/web) and [macOS](https://support.apple.com/guide/deployment/get-the-bundle-id-for-a-mac-app-dep0af2cd611/1/web/1.0).
@@ -0,0 +1,70 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+    <key>PayloadContent</key>
+    <array>
+        <dict>
+            <key>blockedAppBundleIDs</key>
+            <array>
+                <string>com.apple.AppStore</string>
+                <string>com.apple.AppStoreConnect</string>
+                <string>com.apple.store.Jolly</string>
+                <string>com.apple.calculator</string>
+                <string>com.apple.clips</string>
+                <string>com.apple.compass</string>
+                <string>com.apple.MobileAddressBook</string>
+                <string>com.apple.facetime</string>
+                <string>com.apple.DocumentsApp</string>
+                <string>com.apple.findmy</string>
+                <string>com.apple.games</string>
+                <string>com.apple.mobilegarageband</string>
+                <string>com.apple.Health</string>
+                <string>com.apple.iBooks</string>
+                <string>com.apple.iMovie</string>
+                <string>com.apple.itunesu</string>
+                <string>com.apple.MobileStore</string>
+                <string>com.apple.Keynote</string>
+                <string>com.apple.mobilemail</string>
+                <string>com.apple.Maps</string>
+                <string>com.apple.measure</string>
+                <string>com.apple.MobileSMS</string>
+                <string>com.apple.Music</string>
+                <string>com.apple.news</string>
+                <string>com.apple.mobilenotes</string>
+                <string>com.apple.Photo-Booth</string>
+                <string>com.apple.mobileslideshow</string>
+                <string>com.apple.podcasts</string>
+                <string>com.apple.reminders</string>
+                <string>com.apple.mobilesafari</string>
+                <string>com.apple.stocks</string>
+                <string>com.apple.tips</string>
+                <string>com.apple.tv</string>
+                <string>com.apple.VoiceMemos</string>
+                <string>com.apple.Passbook</string>
+                <string>com.apple.Bridge</string>
+            </array>
+            <key>allowAssistant</key>
+            <false/>
+            <key>PayloadIdentifier</key>
+            <string>com.fleetdm.block-apps</string>
+            <key>PayloadType</key>
+            <string>com.apple.applicationaccess</string>
+            <key>PayloadUUID</key>
+            <string>6A48073C-9D28-4B7A-9C69-6D0507CDF377</string>
+            <key>PayloadVersion</key>
+            <integer>1</integer>
+        </dict>
+    </array>
+    <key>PayloadDisplayName</key>
+    <string>Blocked Apps</string>
+    <key>PayloadIdentifier</key>
+    <string>com.fleetdm.block-apps</string>
+    <key>PayloadType</key>
+    <string>Configuration</string>
+    <key>PayloadUUID</key>
+    <string>278D7F3D-454C-47FE-A65F-1BB7087F228D</string>
+    <key>PayloadVersion</key>
+    <integer>1</integer>
+</dict>
+</plist>
@@ -0,0 +1,41 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+    <key>PayloadContent</key>
+    <array>
+        <dict>
+            <key>askForPassword</key>
+            <true/>
+            <!-- Require password after screen saver begins or display is turned off -->
+            <key>askForPasswordDelay</key>
+            <!-- 0 = Immediately -->
+            <integer>0</integer>
+            <!-- Start Screen Saver when inactive -->
+            <key>idleTime</key>
+            <!-- 600 (seconds) = 10 minutes -->
+            <integer>600</integer>
+            <key>moduleName</key>
+            <string>Organization Lock Screen Settings</string>
+            <key>PayloadIdentifier</key>
+            <string>com.fleetdm.lock-screen</string>
+            <key>PayloadType</key>
+            <string>com.apple.screensaver</string>
+            <key>PayloadUUID</key>
+            <string>13DAA34A-FE09-4262-B8BD-2FCAB9E0473E</string>
+            <key>PayloadVersion</key>
+            <integer>1</integer>
+        </dict>
+    </array>
+    <key>PayloadDisplayName</key>
+    <string>Lock Screen</string>
+    <key>PayloadIdentifier</key>
+    <string>com.fleetdm.lock-screen</string>
+    <key>PayloadType</key>
+    <string>Configuration</string>
+    <key>PayloadUUID</key>
+    <string>064F48CF-D311-4DA6-BD3B-B54D5A855A60</string>
+    <key>PayloadVersion</key>
+    <integer>1</integer>
+</dict>
+</plist>
@@ -0,0 +1,45 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+    <key>PayloadContent</key>
+    <array>
+        <dict>
+            <key>allowSimple</key>
+            <false/>
+            <key>changeAtNextAuth</key>
+            <true/>
+            <key>maxFailedAttempts</key>
+            <integer>10</integer>
+            <key>maxPINAgeInDays</key>
+            <integer>365</integer>
+            <key>minComplexChars</key>
+            <integer>1</integer>
+            <key>minLength</key>
+            <integer>10</integer>
+            <key>pinHistory</key>
+            <integer>5</integer>
+            <key>requireAlphanumeric</key>
+            <true/>
+            <key>PayloadIdentifier</key>
+            <string>com.fleetdm.password-policy</string>
+            <key>PayloadType</key>
+            <string>com.apple.mobiledevice.passwordpolicy</string>
+            <key>PayloadUUID</key>
+            <string>29184017-5E10-447B-9208-7C7323B8E21A</string>
+            <key>PayloadVersion</key>
+            <integer>1</integer>
+        </dict>
+    </array>
+    <key>PayloadDisplayName</key>
+    <string>Password Policy</string>
+    <key>PayloadIdentifier</key>
+    <string>com.fleetdm.password-policy</string>
+    <key>PayloadType</key>
+    <string>Configuration</string>
+    <key>PayloadUUID</key>
+    <string>59A95127-AC40-4166-A08A-BEE5BBA98EE5</string>
+    <key>PayloadVersion</key>
+    <integer>1</integer>
+</dict>
+</plist>
@@ -0,0 +1,39 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+    <key>PayloadContent</key>
+    <array>
+        <dict>
+            <key>allowChat</key>
+            <false/>
+            <key>allowBookstore</key>
+            <false/>
+            <key>allowiTunes</key>
+            <false/>
+            <key>allowMusicService</key>
+            <false/>
+            <key>allowRadioService</key>
+            <false/>
+            <key>PayloadIdentifier</key>
+            <string>com.fleetdm.restrictions</string>
+            <key>PayloadType</key>
+            <string>com.apple.applicationaccess</string>
+            <key>PayloadUUID</key>
+            <string>33B4543C-4CBF-479A-B354-AEDC0C8F19C1</string>
+            <key>PayloadVersion</key>
+            <integer>1</integer>
+        </dict>
+    </array>
+    <key>PayloadDisplayName</key>
+    <string>Restrictions</string>
+    <key>PayloadIdentifier</key>
+    <string>com.fleetdm.restrictions</string>
+    <key>PayloadType</key>
+    <string>Configuration</string>
+    <key>PayloadUUID</key>
+    <string>EE9E588C-E5BB-46EA-B180-8072F3594938</string>
+    <key>PayloadVersion</key>
+    <integer>1</integer>
+</dict>
+</plist>
@@ -0,0 +1,9 @@
+{
+    "Type": "com.apple.configuration.softwareupdate.enforcement.specific",
+    "Identifier": "EB13EE2B-5D63-4EBA-810F-5B81D07F5017",
+    "ServerToken": "E180CA9A-F089-4FA3-BBDF-94CC159C4AE8",
+    "Payload": {
+        "TargetOSVersion": "15.7.3",
+        "TargetLocalDateTime": "2026-03-12T09:30:00"
+    }
+}
				`@@ -0,0 +1 @@`
				`../../macos/configuration-profiles/block-apps.mobileconfig`
				`@@ -0,0 +1 @@`
				`../../macos/configuration-profiles/restrictions.mobileconfig`