Microsoft Intune 中的 iOS 裝置限制設定iOS device restriction settings in Microsoft Intune

適用於︰Azure 上的 IntuneApplies to: Intune on Azure
您需要傳統主控台中之 Intune 的相關文件嗎?Looking for documentation about Intune in the classic console? 請移至這裡Go to here.

一般General

  • 診斷資料提交 - 允許或封鎖裝置提交診斷資料給 Apple。Diagnostic data submission - Allow or block the device from submitting diagnostic data to Apple.
  • 螢幕擷取 - 允許使用者可擷取螢幕內容做成影像。Screen capture - Allow the user to capture the contents of the screen as an image.
    • Classroom 應用程式的遠端螢幕觀察 (僅限受監督) - 允許或封鎖 Apple Classroom 應用程式檢視 iOS 裝置螢幕。Remote screen observation by Classroom app (supervised only) - Allow or block the Apple Classroom app from viewing the screen of iOS devices.
    • Classroom 應用程式的無提示螢幕觀察 (僅限受監督) - 如果允許,老師可以在學生不知情的情況下,使用 Classroom 應用程式以無訊息方式觀察學生的 iOS 裝置螢幕。Unprompted screen observation by Classroom app (supervised only) - If allowed, teachers can silently observe the screen of students iOS devices using the Classroom app without the students knowledge.
  • 不信任的 TLS 憑證 - 在裝置上允許不信任傳輸層安全性憑證。Untrusted TLS certificates - Allow untrusted Transport Layer Security certificates on the device.
  • 企業應用程式信任 - 讓使用者選擇信任不是從應用程式市集下載的應用程式。Enterprise app trust - Lets the user select to trust apps that were not downloaded from the app store.
  • 帳戶修改 (僅限受監督) - 封鎖時,這會防止使用者從 iOS 設定應用程式修改裝置特有的設定,例如建立新的裝置帳戶,以及變更使用者名稱或密碼。Account modification (supervised only) - When blocked, this prevents the user from modifying device-specific settings from the iOS settings app, like creating new device accounts, and changing the user name or password. 這也適用於可從 iOS 設定應用程式 (例如郵件、連絡人、行事曆、Facebook 和 Twitter) 中存取的設定。This also applies to settings accessible from the iOS settings app like Mail, Contacts, Calendar, Facebook, and Twitter. 若應用程式的帳戶設定無法從 iOS 設定應用程式 (例如 Microsoft Outlook 應用程式) 加以設定,則這不適用這類應用程式。This does not apply to apps with account settings that are not configurable from the iOS settings app, for example, the Microsoft Outlook app.
  • 啟用裝置設定的限制 (僅限受監督) - 允許使用者在裝置上設定裝置限制 (家長監護)。Enabling restrictions in the device settings (supervised only) - Allow the user to configure device restrictions (parental controls) on the device.
  • 在裝置上使用 [清除所有內容及設定] 選項 (僅限受監督) - 允許使用者可利用清除所有內容與裝置上的設定的選項。Use of the erase all content and settings option on the device (supervised only) - Allow the user to use the option of erasing all content and settings on the device.
  • 修改裝置名稱 (僅限受監督) - 允許使用者變更裝置的名稱。Device name modification (supervised only) - Allow the user to change the name of the device.
  • 修改通知設定 (僅限受監督) - 允許使用者變更裝置通知設定。Notification settings modification (supervised only) - Allow the user to change the device notification settings.
  • 修改背景圖片 (僅限受監督) - 允許使用者變更裝置的背景圖片。Wallpaper modification (supervised only) - Allow the user to change the device wallpaper.
  • 修改企業應用程式信任設定 (僅限受監督) - 讓使用者能選擇信任不是從應用程式市集下載的應用程式。Enterprise app trust settings modification (supervised only) - Lets the user select to trust apps that were not downloaded from the app store.
  • 組態設定檔變更 - 允許使用者安裝組態設定檔。Configuration profile changes - Allow the user to install configuration profiles.
  • 啟用鎖定 (僅限受監督) - 在受監督的 iOS 裝置上將啟用鎖定啟用。Activation Lock (supervised only) - Enable Activation Lock on supervised iOS devices.

密碼Password

  • 密碼 - 需要使用者輸入密碼才可存取該裝置。Password - Require the end user to enter a password to access the device.
    • 簡單密碼 - 允許簡單密碼,像是0000 和 1234。Simple passwords - Allow simple passwords like 0000 and 1234.
    • 必要的密碼類型 - 指定需要的密碼類型,例如只可包含數字或英數字元。Required password type - Specify the type of password that will be required, such as numeric only or alphanumeric.
    • 密碼中的非英數字元數目 - 指定密碼中必須包含的符號字元數 (例如 #@)。Number of non-alphanumeric characters in password - Specify the number of symbol characters (like # or @) that must be included in the password.
    • 密碼長度下限 - 指定密碼的字元數下限。Minimum password length - Specify the minimum number of characters in the password.
    • 登入失敗幾次後即抹除裝置 - 指定失敗的登入嘗試次數,之後這個設定即抹除裝置。Number of sign-in failures before wiping device - Specify the number of failed login attempts before this setting wipes the device.
    • 在螢幕鎖定最少幾分鐘後必須輸入密碼1 - 指定裝置可閒置多久之後,使用者必須重新輸入密碼。Maximum minutes after screen lock before password is required1 - Specify how long the device can remain idle before the user must re-enter their password.
    • 沒有活動最久幾分鐘後鎖定螢幕1 - 指定裝置顯示畫面關閉之前維持開啟狀態的分鐘數。Maximum minutes of inactivity until screen locks1 - Specify the number of minutes before the device display is turned off.
    • 密碼到期 (天數) - 指定多少天後必須變更裝置密碼。Password expiration (days) - Specify the number of days before the device password must be changed.
    • 避免重複使用以前用過的密碼 - 指定裝置記憶先前使用過的密碼數目。Prevent reuse of previous passwords - Specify the number of previously used passwords that the device remembers.
    • 指紋解除鎖定 - 允許使用指紋來解除鎖定相容的裝置。Fingerprint unlock - Allow using a fingerprint to unlock compatible devices.
  • 修改密碼 (僅限受監督) - 防止變更、新增或移除密碼。Passcode modification (supervised only) - Stops the passcode from being changed, added, or removed.
    • 修改指紋 (僅限受監督) - 防止使用者變更、新增或移除 TouchID 設定。Fingerprint modification (supervised only) - Stops the user from changing, adding, or removing TouchID settings.

1當您設定 [沒有活動最久幾分鐘後鎖定螢幕] 的設定以及 [在螢幕鎖定最少幾分鐘後必須輸入密碼] 時,它們會依序套用。1When you configure the settings Maximum minutes of inactivity until screen locks and Maximum minutes after screen lock before password is required, they are applied in sequence. 例如,若您設定將兩項全都設定為 5 分鐘,螢幕將會自動在 5 分鐘後關閉,裝置將會在另一個 5 分鐘之後鎖定。For example, if you set the value for both settings to 5 minutes, the screen will turn off automatically after 5 minutes, and the device will be locked after an additional 5 minutes. 但使用者若是手動關閉螢幕,便會立即套用第二項設定。However, if the user turns off the screen manually, the second setting is immediately applied. 在同一範例中,當使用者關閉螢幕之後,裝置將會在 5 分鐘後鎖定。In the same example, after the user turns off the screen, the device will lock 5 minutes later.

鎖定畫面體驗Locked Screen Experience

  • 在鎖定裝置時存取控制中心 - 允許使用者在裝置鎖定時存取控制中心應用程式。Control Center access while device locked - Allow the user to access the control center app when the device is locked.
  • 鎖定裝置時通知 - 允許使用者在未解除鎖定裝置的情況下,存取通知檢視。Notifications while device locked - Allow the user to access the notifications view without unlocking the device.
  • 在鎖定裝置時使用 Passbook - 允許使用者在鎖定裝置時存取 Passbook 應用程式。Passbook while device locked - Allow the user to access the Passbook app while the device is locked.
  • 在鎖定裝置時使用今日檢視 - 允許使用者在鎖定裝置時可以看到今日檢視。Today view while device locked - Allow the user to see the Today view when the device is locked.

App Store、文件檢視、遊戲App Store, Doc Viewing, Gaming

  • App Store - 封鎖對受監督裝置上 App Store 的存取。App store - Block access to the app store on supervised devices.
    • 從 App Store 安裝應用程式 (僅限受監督) - 從裝置主畫面封鎖 App Store。Installing apps from App Store (supervised only) - Blocks the app store from the device home screen. 終端使用者可以繼續使用 iTunes 或 Apple Configurator 來安裝應用程式。End users can continue to use iTunes or the Apple Configurator to install apps.
    • 自動應用程式下載 (僅限受監督) - 防止將其他 iOS 裝置上購買的應用程式下載到此裝置。Automatic app downloads (supervised only) - Stops apps that were purchased on another iOS device from being downloaded to this device.
  • 存取 App Store 的密碼 - 要求使用者先輸入密碼,才可瀏覽 App Store。Password to access app store - Require the user to enter a password before they can visit the app store.
  • 應用程式內購買 - 允許從執行中的應用程式進行市集購買。In-app purchases - Allow store purchases to be made from within a running app.
  • 明確的 iTunes 音樂、播客或新聞內容 (僅限監督) - 允許裝置可從市集存取標記為成人內容的內容。Explicit iTunes music, podcast, or news content (supervised only) - Allow the device to access content rated as adult from the store.
  • 從 iBook Store 下載標記為 [成人作品] 的內容 - 允許使用者下載分類為「成人作品」的書籍。Download content from iBook store flagged as 'Erotica' - Allow the user to download books with the "Erotica" category.
  • 在未受管理應用程式中檢視公司文件 - 允許在任何應用程式中檢視公司文件。Viewing corporate documents in unmanaged apps - Allow corporate documents to be viewed in any app.
    範例︰您想要防止使用者將檔案從 OneDrive 應用程式儲存至 Dropbox。Example: You want to prevent users from saving files from the OneDrive app to Dropbox. 將此設定設定為否。Configure this setting as no. 裝置收到原則後 (例如重新啟動後),即不再允許儲存。After the device receives the policy (for example, after a restart), it will no longer allow saving.
  • 在公司應用程式中檢視非公司文件 - 允許在公司的受管理應用程式中檢視任何文件。Viewing non-corporate documents in corporate apps - Allow any document to be viewed in corporate managed apps.
  • 將 AirDrop 視為未受管理的目的地 - 停止透過從受管理應用程式傳送資料。Treat AirDrop as an unmanaged destination - Stops managed apps from being able to send data via. 從 Airdrop 傳送資料。Airdrop.
  • 正在新增 Game Center 的朋友 (僅限監督) - 允許使用者在 Game Center 新增朋友。Adding Game Center friends (supervised only) - Allow the user to add friends in Game Center.
  • Game Center (僅限受監督) - 封鎖或啟用使用 Game Center 應用程式。Game Center (supervised only) - Block or enable the use of the Game Center app.
  • 多人遊戲 (僅限受監督) - 允許使用者在裝置上玩多人遊戲。Multiplayer gaming (supervised only) - Allow the user to play multiplayer games on the device.
  • 分級區域 - 為想要設定允許的下載項目選擇分級區域,然後為電影電視節目選擇允許的分級。Ratings region - Choose the ratings region for which you want to configure allowed downloads, then choose the allowed ratings for Movies and TV Shows.
  • 應用程式 - 選擇使用者可下載之應用程式的年齡分級,也可以選擇 [允許所有應用程式]。Apps - Choose the allowed age rating of apps that users will be able to download, or you can choose Allow All Apps.

內建應用程式Built-in Apps

  • 相機 - 指定是否可以使用裝置上的相機。Camera - Select whether the camera on the device can be used.
    • FaceTime -允許在裝置上使用 FaceTime 應用程式。FaceTime - Allow the FaceTime app to be used on the device.
  • Siri - 允許在裝置上使用 Siri 語音助理。Siri - Allow use of the Siri voice assistant on the device.
    • 在鎖定裝置時使用 Siri - 允許裝置在鎖定的情況下使用 Siri 語音助理。Siri while device is locked - Allow use of the Siri voice assistant on the device while it is locked.
    • Siri 不雅內容篩選 (僅限受監督) - 讓 Siri 不會聽寫出或說出不雅字眼。Siri profanity filter (supervised only) - Prevents Siri from dictating, or speaking profane language.
    • Siri 從網際網路查詢使用者產生的內容 (僅限受監督) - 允許 Siri 存取網站來回答問題。Siri to query user-generated content from the internet (supervised only) - Allow Siri to access websites to answer questions.
  • Apple News (僅限受監督) - 允許使用 Apple News 應用程式。Apple News (supervised only) - Allow use of the Apple News app.
  • iBooks Store (僅限受監督) - 允許使用者在 iBooks Store 瀏覽及購買書籍。iBooks store (supervised only) - Allow the user to browse and purchase books from the iBooks store.
  • 裝置上的「訊息」應用程式 (僅限受監督) - 允許使用傳送及讀取簡訊的「訊息」應用程式。Messages app on the device (supervised only) - Allow use of the Messages app to send and read text messages.
  • Podcasts (僅限受監督) - 允許使用 Podcasts 應用程式。Podcasts (supervised only) - Allow use of the Podcasts app.
  • 音樂服務 (僅限受監督) - 允許使用 Apple「音樂」應用程式。Music service (supervised only) - Allow use of the Apple Music app.
  • iTunes Radio 服務 (僅限受監督) - 允許使用 iTunes Radio 應用程式。iTunes Radio service (supervised only) - Allow use of the iTunes Radio app.
  • 「尋找我的朋友」應用程式設定的變更 (僅限受監督) - 允許使用者可變更「尋找我的朋友」應用程式之設定。Changes to the Find My Friends app settings (supervised only) - Allow the user to change settings for the Find My Friends app.
  • Spotlight 搜尋傳回網際網路上的結果 (僅限受監督) - 讓 Spotlight 搜尋連線至網際網路,以提供進一步的結果。Spotlight search to return results from internet (supervised only) - Let Spotlight search connect to the Internet to provide further results.

受限應用程式Restricted apps

您可以在受限制應用程式清單中,設定下列清單之一︰In the restricted apps list, you can configure one of the following lists:

禁止的應用程式清單 - 列出不允許使用者安裝與執行的應用程式 (並非由 Intune 管理)。A Prohibited apps list - List the apps (not managed by Intune) that users are not allowed to install and run. 核准的應用程式清單 - 列出允許使用者安裝的應用程式。An Approved apps list - List the apps that users are allowed to install. 若要保持相容,使用者絕不能安裝未列出的應用程式。To remain compliant, users must not install apps that are not listed. 自動允許 Intune 所管理的應用程式。Apps that are managed by Intune are automatically allowed.

若要設定清單,請按一下 [新增],然後在應用程式市集中,指定您所選的名稱 (也可指定選用的應用程式發行者) 以及應用程式的 URL。To configure the list, click Add, then specify a name of your choice, optionally the app publisher, and the URL to the app in the app store.

如何在市集中指定應用程式的 URLHow to specify the URL to an app in the store

若要指定應用程式清單中的應用程式 URL,請使用下列格式:To specify an app URL in the apps list, use the following format:

使用搜尋引擎,在 iTunes App Store 中尋找您要使用的應用程式,然後開啟應用程式的頁面。Using a search engine, find the app that you want to use in the iTunes App Store and open the page for the app. 複製頁面的 URL,並使用此 URL 作為設定允許或禁止的應用程式清單之 URL,或是想要以 kiosk 模式執行的應用程式。Copy the URL of the page and use this as the URL to configure the allowed or prohibited apps list or an app that you want to run in kiosk mode. 包含受限應用程式設定的裝置設定檔,必須指派給使用者群組。Device profiles that contain restricted app settings must be assigned to groups of users.

範例:搜尋 Microsoft Word for iPad。Example: Search for Microsoft Word for iPad. 您要使用的 URL 是 https://itunes.apple.com/us/app/microsoft-word-for-ipad/id586447913?mt=8。The URL that you use will be https://itunes.apple.com/us/app/microsoft-word-for-ipad/id586447913?mt=8.

注意

您也可以先使用 iTunes 軟體尋找應用程式,再使用 [複製連結] 命令取得應用程式的 URL。You can also use the iTunes software to find the app and then use the Copy Link command to get the app URL.

其他選項Additional options

您也可以按一下 [匯入]填入格式如一下的 csv 檔案清單:<應用程式 URL>,<應用程式名稱>,<應用程式發行者>,或按一下 [匯出],建立 csv 檔案,其中包含格式相同的受限應用程式清單內容。You can also click Import to populate the list from a csv file in the format <app url>, <app name>, <app publisher> or click Export to create a csv file containing the contents of the restricted apps list in the same format.

顯示或隱藏應用程式 (僅限受監督)Show or hide apps (supervised only)

在顯示或隱藏的應用程式清單中,可以設定下列清單之一 (需要執行 iOS 9.3 或更新版本的受監督裝置)。In the show or hide apps list, you can configure one of the following lists (requires supervised devices running iOS 9.3 or later).

隱藏的應用程式清單 - 指定對使用者隱藏的應用程式清單。A Hidden apps list - Specify a list of apps that will be hidden from users. 使用者無法檢視或啟動這些應用程式。Users cannot view, or launch these apps. 顯示的應用程式清單 - 指定使用者可檢視及啟動的應用程式清單。An Visible apps list - Specify a list of apps that users can view and launch. 無法檢視或啟動其他應用程式。No other apps can be viewed or launched.

若要設定清單,請按一下 [新增],然後在應用程式市集中,指定您所選的名稱 (也可指定選用的應用程式發行者) 以及應用程式的 URL。To configure the list, click Add, then specify a name of your choice, optionally the app publisher, and the URL to the app in the app store.

如何在市集中指定應用程式的 URLHow to specify the URL to an app in the store

若要指定應用程式清單中的應用程式 URL,請使用下列格式:To specify an app URL in the apps list, use the following format:

使用搜尋引擎,在 iTunes App Store 中尋找您要使用的應用程式,然後開啟應用程式的頁面。Using a search engine, find the app that you want to use in the iTunes App Store and open the page for the app. 複製頁面的 URL,並使用此 URL 作為設定允許或禁止的應用程式清單之 URL,或是想要以 kiosk 模式執行的應用程式。Copy the URL of the page and use this as the URL to configure the allowed or prohibited apps list or an app that you want to run in kiosk mode.

範例:搜尋 Microsoft Word for iPad。Example: Search for Microsoft Word for iPad. 您要使用的 URL 是 https://itunes.apple.com/us/app/microsoft-word-for-ipad/id586447913?mt=8。The URL that you use will be https://itunes.apple.com/us/app/microsoft-word-for-ipad/id586447913?mt=8.

注意

您也可以先使用 iTunes 軟體尋找應用程式,再使用 [複製連結] 命令取得應用程式的 URL。You can also use the iTunes software to find the app and then use the Copy Link command to get the app URL.

其他選項Additional options

您也可按一下 [匯入],填入格式如下的 csv 檔案清單:<應用程式 URL>,<應用程式名稱>,<應用程式發行者>,或按一下 [匯出],建立 csv 檔案,其中包含格式相同的隱藏或顯示之應用程式清單的內容。You can also click Import to populate the list from a csv file in the format <app url>, <app name>, <app publisher> or click Export to create a csv file containing the contents of the hidden or visible apps list in the same format.

無線Wireless

  • 數據漫遊 - 允許裝置在行動電話通訊網路時進行資料漫遊。Data roaming - Allow data roaming when the device is on a cellular network.
  • 漫遊時執行全域背景擷取 - 允許裝置在行動電話通訊網路漫遊時擷取資料 (例如電子郵件)。Global background fetch while roaming - Allow the device to fetch data such as email while it is roaming on a cellular network.
  • 語音撥號 - 允許在裝置上使用語音撥號功能。Voice dialing - Allow use of the voice dialing feature on the device.
  • 語音漫遊 - 允許裝置在行動電話通訊網路時進行語音漫遊。Voice roaming - Allow voice roaming when the device is on a cellular network.
  • 應用程式行動數據使用量設定的變更 (僅限受監督) - 允許使用者控制哪些應用程式可以使用行動數據資料。Changes to app cellular data usage settings (supervised only) - Allow the user to control which apps are allowed to use cellular data.
  • 個人熱點 - 不允許裝置作為個人熱點。Personal Hotspot - Don't allow the device to be used as a personal hotspot. 這項設定可能與某些電訊廠商不相容。This setting might not be compatible with some carriers.
  • 僅使用組態設定檔加入 Wi-Fi 網路 (僅限受監督) - 僅允許裝置加入已設定 Intune Wi-Fi 設定檔的 Wi-Fi 網路。Join Wi-Fi networks only using configuration profiles (supervised only) - Only allow the device to join Wi-Fi networks that have been configured with an Intune Wi-Fi profile.

  • 行動數據使用規則 (僅限受管理的應用程式) - 讓您定義受管理的應用程式可在行動電話通訊網路上使用的資料類型。Cellular usage rules (managed apps only) - Lets you define the data types that managed apps can use when on cellular networks. 從下列選項進行選擇:Choose from:

    • 禁止使用行動數據Block use of cellular data
    • 禁止在漫遊時使用行動數據Block use of cellular data when roaming

已連線的裝置Connected Devices

  • AirDrop (僅限受監督) - 允許使用 AirDrop 功能與鄰近裝置交換內容。AirDrop (supervised only) - Allow use of the AirDrop feature to exchange content with nearby devices.
  • Apple Watch 配對 (僅限受監督) - 允許裝置與 Apple Watch 配對。Apple Watch pairing (supervised only) - Allow the device to pair with an Apple Watch.
  • 已配對之 Apple Watch 的手腕偵測 - 啟用時,Apple Watch 就不會在穿戴期間顯示通知。Wrist detection for paired Apple watch - When enabled, the Apple Watch won't display notifications when it is not being worn.
  • 修改藍牙 (僅限受監督) - 封鎖使用者變更藍牙裝置上的設定。Bluetooth modification (supervised only) - Block the end user from changing Bluetooth settings on the device.
  • 主機配對,以控制 iOS 裝置所能配對的裝置 (僅限受監督) - 允許主機配對,讓系統管理員可控制能與 iOS 裝置配對的裝置。Host pairing to control the devices an iOS device can pair with (supervised only) - Allow host pairing to let the administrator control which devices an iOS device can pair with.
  • 需要 AirPlay 連出要求配對密碼 - 使用者在使用 AirePlay 將內容串流到其他 Apple 裝置時,需要有成對的密碼。Require AirPlay outgoing requests pairing password - Require a pairing password when the user uses AirPlay to stream content to other Apple devices.

鍵盤與字典Keyboard and Dictionary

  • 字組定義查閱 (僅限受監督) - 允許可讓您反白字組並查詢其定義的 iOS 功能。Word definition lookup (supervised only) - Allow the iOS feature that lets you highlight a word and look up it's definition.
  • 預測鍵盤 (僅限受監督) - 允許使用預測鍵盤,以建議使用者可能想要使用的字組。Predictive keyboards (supervised only) - Allow the use of predictive keyboards that suggest words the user might want.
  • 自動校正 (僅限受監督) - 讓裝置自動校正拼字錯誤的字組。Auto-correction (supervised only) - Lets the device automatically correct misspelled words.
  • 鍵盤拼字檢查 (僅限受監督) - 允許在裝置進行拼字檢查程式。Keyboard spell-check (supervised only) - Allows the device spell checker.
  • 鍵盤快速鍵 (僅限受監督) - 允許使用鍵盤快速鍵。Keyboard shortcuts (supervised only) - Allows use of keyboard shortcuts.
  • 聽寫 (僅限受監督) - 防止使用者使用語音輸入來輸入文字。Dictation (supervised only) - Stops the user from using voice input to enter text.

雲端與儲存體Cloud and Storage

  • 備份至 iCloud - 允許使用者將裝置備份到 iCloud。Backup to iCloud - Allow the user to back up the device to iCloud.
  • 文件同步至 iCloud (僅限受監督) - 允許文件和索引鍵-值同步處理到 iCloud 儲存空間。Document sync to iCloud (supervised only) - Allow document and key-value synchronization to your iCloud storage space.
  • 相片串流同步至 iCloud - 讓使用者可在其裝置上啟用 [共享相片串流],以允許將相片同步處理到 iCloud 並可在所有使用者裝置上使用。Photo stream syncing to iCloud - Lets users enable My Photo Stream on their device which allow photos to sync to iCloud and be available on all the users devices.
  • 加密備份 - 需要加密任何裝置備份。Encrypted backup - Require any device backups to be encrypted.
  • iCloud 照片圖庫 - 如果設定為 [否],請停用 iCloud 相片圖庫,讓使用者在雲端中儲存相片和視訊。iCloud Photo Library - If set to No, disables the use of iCloud photo library which lets users store photos and videos in the cloud. 如果這是設定為 [否],將會從裝置中移除任何未從 iCloud 相片圖庫完整下載到裝置的相片。Any photos not fully downloaded from iCloud Photo Library to the device will be removed from the device if this is set to No.
  • 受管理應用程式同步至雲端 - 允許您使用 Intune 管理的應用程式將資料同步至使用者的 iCloud 帳戶。Managed apps sync to cloud - Allow apps that you manage with Intune to sync data to the user's iCloud account.
  • 共享相片串流 - 設定為 [否],會停用裝置上的 [iCloud 相片共享]。Shared photo stream - Set to No to disable iCloud Photo Sharing on the device..
  • 活動接續 - 允許使用者在另一部 iOS 或 macOS 裝置上繼續執行在 iOS 裝置上啟動的工作 (遞交)。Activity continuation - Allow the user to continue work that they started on an iOS device on another iOS or macOS device (Handoff).

自發性單一應用程式模式 (僅限受監督)Autonomous single app mode (supervised only)

使用這些設定來設定 iOS 裝置在自發性單一應用程式模式中執行指定的應用程式。Use these settings to configure iOS devices to run specified apps in autonomous single app mode. 設定此模式並執行應用程式時,裝置會被鎖定,因此只能執行該應用程式。When this mode is configured, and the app is run, the device is locked so that it can only run that app. 一個例子是當您設定應用程式讓使用者在裝置上進行測試時。An example of this is when you configure an app that lets users take a test on the device. 當應用程式的動作完成時,或當您移除此原則時,裝置就會回到其正常狀態。When the apps actions are complete, or you remove this policy, the device returns to its normal state.

設定Settings

  • 應用程式名稱:輸入應用程式的名稱,這將會顯示在此刀鋒視窗上的應用程式清單中。App name - Enter the name of the app as it will appear in the apps list on this blade.
  • 應用程式套件組合識別碼:輸入應用程式的套件組合識別碼。App Bundle ID - Enter the bundle ID of the app. 如需說明,請參閱本主題中的<內建的 iOS 應用程式套件組合識別碼參考>。For help, see Bundle ID reference for built-in iOS apps in this topic.

在您指定每個應用程式的名稱和套件組合識別碼之後,選擇 [新增] 以將它附加至清單。After you specify each app name and bundle ID, choose Add to append it to the list.

  • 匯入:匯入包含應用程式名稱及其相關聯套件組合識別碼清單的逗點分隔值 (.csv) 檔案。Import - Import a comma-separated values (.csv) file containing a list of app names, and their associated bundle IDs.
  • 匯出:將您所設定的應用程式名稱及相關聯的套件組合識別碼匯出為逗點分隔值 (.csv) 檔案。Export - Export the app names, and associated bundle IDs you have configured to a comma-separated values (.csv) file.

內建 iOS 應用程式的套件組合識別碼參考Bundle ID reference for built-in iOS apps

此清單顯示一些常見內建 iOS 應用程式的套件組合識別碼。This list shows the bundle ID of some common built-in iOS apps. 若要尋找其他應用程式的套件組合識別碼,請連絡軟體廠商。To find the bundle ID of other apps, contact your software vendor.

,com.apple.AppStore,App Store,Apple
,com.apple.calculator,Calculator,Apple
,com.apple.mobilecal,Calendar,Apple
,com.apple.camera,Camera,Apple
,com.apple.mobiletimer,Clock,Apple
,com.apple.compass,Compass,Apple
,com.apple.MobileAddressBook,Contacts,Apple
,com.apple.facetime,FaceTime,Apple
,com.apple.mobileme.fmf1,Find Friends,Apple
,com.apple.mobileme.fmip1,Find iPhone,Apple
,com.apple.gamecenter,Game Center,Apple
,com.apple.mobilegarageband,GarageBand,Apple
,com.apple.Health,Health,Apple
,com.apple.iBooks,iBooks,Apple
,com.apple.MobileStore,iTunes Store,Apple
,com.apple.itunesu,iTunes U,Apple
,com.apple.Keynote,Keynote,Apple
,com.apple.mobilemail,Mail,Apple
,com.apple.MapsMaps,Apple
,com.apple.MobileSMS,Messages,Apple
,com.apple.Music,Music,Apple
,com.apple.news,News,Apple
,com.apple.mobilenotes,Notes,Apple
,com.apple.Numbers,Numbers,Apple
,com.apple.Pages,Pages,Apple
,com.apple.Photo-Booth,Photo Booth,Apple
,com.apple.mobileslideshow,Photos,Apple
,com.apple.podcasts,Podcasts,Apple
,com.apple.reminders,Reminders,Apple
,com.apple.mobilesafariSafari,Apple
,com.apple.Preferences,Settings,Apple
,com.apple.stocks,Stocks,Apple
,com.apple.tips,Tips,Apple
,com.apple.videos,Videos,Apple
,com.apple.VoiceMemos,VoiceMemos,Apple
,com.apple.Passbook,Wallet,Apple
,com.apple.Bridge,Watch,Apple
,com.apple.weather,Weather,Apple

Kiosk (僅限受監督)Kiosk (supervised only)

  • kiosk 模式下執行的應用程式 - 選擇 [受管理的應用程式] 可選取已新增至 Intune 的應用程式,而選擇 [市集應用程式] 則可指定市集中應用程式的 URL。App that runs in kiosk mode - Choose Managed App to select an app you've added to Intune, or Store App to specify the URL to an app in the store. 不允許在裝置上執行其他應用程式。No other apps will be allowed to run on the device. 如需詳細說明,請參閱本主題稍後的<如何將 URL 指定給應用程式市集>。For more help, see "How to specify URLs to app stores" later in this topic.
    • 輔助觸控 - 啟用或停用 [輔助觸控] 協助工具設定,協助使用者執行可能很難執行的螢幕手勢。Assistive touch - Enable or disable the Assistive Touch accessibility setting, which helps the user perform on-screen gestures that might be difficult for them to perform.
    • 色彩對換 - 啟用或停用 [色彩對換] 協助工具設定,以調整顯示畫面來協助視力受損的使用者。Invert colors - Enable or disable the Invert Colors accessibility setting, which adjusts the display to help users with visual impairments.
    • 單聲道音訊 - 啟用或停用協助工具設定 [單聲道音訊]。Mono audio - Enable or disable the accessibility setting Mono audio.
    • 配音 - 啟用或停用協助工具設定 [配音],以大聲讀出裝置螢幕上的文字。VoiceOver - Enable or disable the accessibility setting VoiceOver, which reads aloud text on the device display.
    • 縮放 - 啟用或停用 [縮放] 協助工具的設定,以讓使用者使用觸控來縮放裝置螢幕。Zoom - Enable or disable the Zoom accessibility setting, which lets the user use touch to zoom in to the device display.
    • 自動鎖定 - 啟用或停用裝置的自動鎖定。Auto lock - Enable or disable automatic locking of the device.
    • 響鈴切換 - 啟用或停用裝置上的響鈴 (靜音) 切換。Ringer switch - Enable or disable the ringer (mute) switch on the device.
    • 旋轉螢幕 - 啟用或停用在使用者旋轉裝置時變更螢幕方向。Screen rotation - Enable or disable changing the screen orientation when the user rotates the device.
    • 螢幕睡眠按鈕 - 啟用或停用裝置上的喚醒螢幕睡眠按鈕。Screen sleep button - Enable or disable the screen sleep wake button on the device.
    • 觸控 - 在裝置上啟用或停用觸控螢幕。Touch - Enable or disable the touchscreen on the device.
    • 音量按鈕 - 啟用或停用裝置上的音量按鈕。Volume buttons - Enable or disable the use of the volume buttons on the device.
    • 輔助觸控控制項 - 啟用或停用輔助觸控調整,以讓使用者調整輔助觸控功能。Assistive touch control - Enable or disable assistive touch adjustments, which let the user adjust the assistive touch function.
    • 色彩對換控制 - 啟用或停用色彩對換調整,以讓使用者調整色彩對換功能。Invert colors control - Enable or disable invert colors adjustments, which let the user adjust the invert colors function.
    • 說出選取的文字 - 啟用或停用 [讀出選取範圍] 協助工具設定,以大聲讀出使用者選取的文字。Speak on selected text - Enable or disable the Speak Selection accessibility settings, which can read aloud the text that the user selects.
    • 配音控制 - 啟用或停用配音調整,以讓使用者調整配音功能 (例如,大聲讀出螢幕上文字的速度)。VoiceOver control - Enable or disable voiceover adjustments, which let the user adjust the VoiceOver function (for example, how fast on-screen text is read aloud).
    • 縮放控制 - 啟用或停用縮放調整,以讓使用者調整縮放功能。Zoom control - Enable or disable zoom adjustments, which let the user adjust the zoom function.
注意

您必須先使用 Apple Configurator 工具或 Apple 裝置註冊方案,將裝置設為受監督模式,才可為 iOS 裝置設定 kiosk 模式。Before you can configure an iOS device for kiosk mode, you must use the Apple Configurator tool or the Apple Device Enrollment Program to put the device into supervised mode. 如需 Apple Configurator 工具的詳細資訊,請參閱您的 Apple 文件。For more information about the Apple Configurator tool, see your Apple documentation. 如果指定的 iOS 應用程式在您指派設定檔之後安裝,則裝置在重新啟動之前,不會進入 Kiosk 模式。If the iOS app that you specify is installed after you assign the profile, the device will not enter kiosk mode until after it is restarted.

SafariSafari

  • Safari (僅限受監督) - 指定是否可以在裝置上使用 Safari 瀏覽器。Safari (supervised only) - Specify whether the Safari browser can be used on the device.
  • 自動填滿 - 允許使用者變更瀏覽器中的自動完成設定。Autofill - Allow the user to change autocomplete settings in the browser.
  • Cookie - 允許瀏覽器使用 Cookie。Cookies - Allow the browser to use cookies.
  • JavaScript - 允許在瀏覽器中執行 Java 指令碼。JavaScript - Allow Java scripts to run in the browser.
  • 詐騙警告 - 允許瀏覽器中的詐騙警告。Fraud warnings - Allow fraud warnings in the browser.
  • 快顯 - 啟用或停用瀏覽器的快顯封鎖程式。Pop-ups - Enable or disable the browser pop-up blocker.

DomainsDomains

未標記的電子郵件網域Unmarked email domains

在 [電子郵件網域 URL] 欄位中,將一或多個 URL 新增到清單中。In the Email Domain URL field, add one or more URLs to the list. 當使用者接收到來自不是您所設定之網域的電子郵件時,該電子郵件會在 iOS 郵件應用程式中標記為不受信任。When end users receive an email from a domain other than those you configured, the email will be marked as untrusted in the iOS Mail app.

受管理的 Web 網域Managed web domains

在 [Web 網域 URL] 欄位中,將一或多個 URL 新增到清單中。In the Web Domain URL field, add one or more URLs to the list. 當文件是從您所指定的網域下載時,它們會被視為受管理的文件。When documents are downloaded from the domains you specify, they will be considered managed. 此設定僅適用於使用 Safari 瀏覽器下載的文件。This setting applies only to documents downloaded using the Safari browser.

Safari 密碼自動填入網域Safari password auto fill domains

在 [網域 URL] 欄位中,將一或多個 URL 新增到清單中。In the Domain URL field, add one or more URLs to the list. 使用者只能儲存此清單中 URL 的密碼。Users can only save web passwords from URLs in this list. 此設定僅適用於處於受監督模式的 iOS 9.3 及更新版本裝置中的 Safari 瀏覽器。This setting applies only to the Safari browser, and to iOS 9.3 and later devices in supervised mode. 如果您不指定任何 URL,便可以儲存所有網站的密碼。If you don't specify any URLs, then passwords can be saved from all web sites.

若要提交意見反應,請前往 Intune Feedback