# MacOS Profiles

> Configuration profile payloads supported on macOS devices, including Active Directory join, kernel extension policy, and restrictions.

Source: https://docs.capaone.com/capainstaller/the-capainstaller-console/configuration-management/what-is-configuration-management/profiles/macos-profiles/  
Product: CapaInstaller — a separate CapaSystems product; do not apply this page to any other.

## Profiles supported by macOS

If you need to configure a large number of devices or to provide lots of custom email settings, network settings, or certificates to a large number of devices, configuration profiles are an easy way to do it.

### [Active Directory Payload macOS](/capainstaller/the-capainstaller-console/configuration-management/what-is-configuration-management/profiles/macos-profiles/active-directory-payload-macos/)

This payload can be used to join a macOS device to an Active Directory and configure the domain membership options.

### [Kernel Extension Policy macOS](/capainstaller/the-capainstaller-console/configuration-management/what-is-configuration-management/profiles/macos-profiles/kernel-extension-policy-macos/)

This payload can be used to allow applications to run without user prompting

### [Restrictions Payload MacOS](/capainstaller/the-capainstaller-console/configuration-management/what-is-configuration-management/profiles/macos-profiles/restrictions-payload-macos/)

This payload can be used to restrict access to certain features and capabilities of a macOS device. Some restrictions require that the device is **Supervised** and is marked with an asterisk.

:::note[Important]
macOS profiles are distributed to the devices via *[Apples Device Management](https://developer.apple.com/library/content/documentation/Miscellaneous/Reference/MobileDeviceManagementProtocolRef/3-MDM_Protocol/MDM_Protocol.html)*.

When profiles are sent from CapaInstaller, complete control is handed over to the *[Apple Push Notification service](https://developer.apple.com/library/content/documentation/NetworkingInternet/Conceptual/RemoteNotificationsPG/APNSOverview.html)* that handles he distribution of the profile.

Download, installation and verification is then controlled exclusively by macOS on the target computer.
:::

### Read more

[Apple Configuration Profile Reference](https://developer.apple.com/library/content/featuredarticles/iPhoneConfigurationProfileRef/Introduction/Introduction.html)

[Apple Push Notification service - overview](https://developer.apple.com/library/content/documentation/NetworkingInternet/Conceptual/RemoteNotificationsPG/APNSOverview.html)