# Create a Custom Configuration for Apple

> Create a custom configuration profile for Apple devices, and the risks to watch when setting custom restrictions.

Source: https://docs.capaone.com/capaone/mobile-manager/apple-mdm/create-a-custom-configuration-for-apple/  
Product: CapaOne — a separate CapaSystems product; do not apply this page to any other.

:::note[Important]
Read Before starting.
When configuring custom restrictions, there is a potential risk of rendering the device unusable. Proceed with caution.
:::

## New custom configuration for Apple devices

1. Navigate to Dash.capaone.com.
2. Go to Apple → Configurations → New.
3. Find **“Custom Configuration”** in the list and enable the feature.

   ![Custom Configuration enabled in the new Apple configuration](/attachments/capaone/cc18dc54-237e-43f5-8a2e-59584ede023d.png)
4. Apple uses plist to define the restrictions. You can find the templates at the bottom of [https://developer.apple.com/documentation/devicemanagement/restrictions](https://developer.apple.com/documentation/devicemanagement/restrictions).

## Example: deactivating Apple Intelligence

**XML**

```xml
<plist version="1.0">
<dict>
    <key>PayloadContent</key>
    <array>
        <dict>
            <key>allowAppleIntelligenceReport</key>
            <false/>
            <key>allowExternalIntelligenceIntegrations</key>
            <false/>
            <key>allowExternalIntelligenceIntegrationsSignIn</key>
            <false/>
            <key>allowVisualIntelligenceSummary</key>
            <false/>
            <key>allowWritingTools</key>
            <false/>
            <key>PayloadIdentifier</key>
            <string>com.example.myrestrictionspayload</string>
            <key>PayloadType</key>
            <string>com.apple.applicationaccess</string>
            <key>PayloadUUID</key>
            <string>53bec1be-ffec-4f88-acbd-b02aee8f04a9</string>
            <key>PayloadVersion</key>
            <integer>1</integer>
        </dict>
    </array>
    <key>PayloadDisplayName</key>
    <string>Restrictions</string>
    <key>PayloadIdentifier</key>
    <string>com.example.myprofile</string>
    <key>PayloadType</key>
    <string>Configuration</string>
    <key>PayloadUUID</key>
    <string>6020206c-12c2-4ada-987a-dd4c560ca73a</string>
    <key>PayloadVersion</key>
    <integer>1</integer>
</dict>
</plist>
```

:::note[Important]
It is important that all configuration settings remain inside the **Payload Content**, as shown in the example. If any settings are placed outside of the Payload Content, the configuration will not be applied.

![Custom configuration with all settings placed inside Payload Content](/attachments/capaone/0b91a99a-a431-4997-adde-30679c447945.png)
:::

## Steps to validate the configuration has been applied

1. Open the settings app on the device.
2. Find General → VPN And Device Management → open the MDM Profile.
3. Here you should see Restrictions.

   ![Device MDM profile listing the Restrictions payload](/attachments/capaone/b0f5f863-9489-476d-8f6a-c964edf43e51.png)
4. Open Restrictions to see the applied restrictions.

   ![Applied restrictions shown on the device](/attachments/capaone/c0205cc5-42bf-4d0f-8d67-c4bbc12b4f68.png)

:::note[Important]
If no restrictions are present, the configuration has not been applied correctly.
Please check the plist for any syntax errors.
:::