# Configuration profile reference for macOS devices Configuration profiles are XML files that lets you configure settings on macOS devices. These profiles can be created and deployed by administrators to enforce security policies, manage restrictions, and customize the user experience. With Hexnode UEM, you may [remotely deploy configuration profiles](https://www.hexnode.com/mobile-device-management/help/how-to-deploy-custom-configuration-profiles-to-macos-devices/) on macOS devices. This document provides a repository of custom configuration profiles that can be valuable for Mac administrators in their workflow. Create and deploy configuration profiles ---------------------------------------- To prepare a configuration profile, identify the specific restrictions, policies, or settings you want to apply to the devices. You can use profile creator tools like Profile Creator, Apple Configurator, iMazing, or even text editors to create the configuration profiles. To deploy a configuration profile on a Mac using Hexnode UEM, you will need a signed or unsigned non-encrypted file which can be of the following extensions- **.mobileconfig**, **.xml**, and **.plist**. Once you’ve prepared the configuration profile, follow these steps: 1. Navigate to **Policies** > **New Policy** or existing policy > **macOS**. 2. Select **Deploy Custom Configuration** > **Configure** > **Choose File**; you can either select a profile stored on your device or choose one that is already added to the portal. Click **OK**. 3. Navigate to **Policy Targets** to select the Devices/Device Groups/Users/User Groups/Domains to associate the policy with. Save the policy to deploy it. 4. To view the profile output status on the device, go to the **Action History** sub-tab on the device details page. Notes:- Ensure that your Hexnode UEM portal is running its latest version to support the deployment of signed configuration profiles. - While defining a profile, ensure it contains all the mandatory payload keys, including **PayloadUUID**, **PayloadType**, **PayloadVersion** and **PayloadIdentifier**, etc. - Binary .plist files cannot be used to deploy custom configuration profiles. You can convert the binary .plist files to normal .plist files using the terminal command: **plutil -convert binary1 **. - Generic .plist files alone can’t be used to deploy custom configuration profiles. It is recommended to choose an appropriate payload, add [profile-specific payload keys](https://developer.apple.com/documentation/devicemanagement/profile-specific_payload_keys) to the configuration profile, and verify them before uploading it. - Ensure that conflicting configurations are not deployed across the devices. Wildcards for macOS configuration profiles ------------------------------------------ Hexnode supports the use of the following wildcards: - %devicename% - %model% - %serialnumber% - %osname% - %osversion% - %deviceid% - %udid% - %phonenumber% - %wifimacaddress% - %name% - %email% - %username% - %domain% - %netbiosname% - %assettag% - %department% - %devicenotes% - %userprincipalname% - %alternateemail% In configuration profiles, wildcards are used as placeholders to represent dynamic values that can vary based on the device or user. For example, you need to configure mail accounts for multiple users. Since each user has a unique account name, the value of the *EmailAccountName* key will vary for each user. In such instances, you can utilize a wildcard to represent corresponding value. One common wildcard option is **%username%**. By incorporating **%username%** as the wildcard for the *EmailAccountName* field value in the configuration profile, the actual device user’s name will be substituted when the profile is deployed. Custom configuration profiles ----------------------------- Serial NoConfiguration profile1[Disable Screen capture](https://www.hexnode.com/mobile-device-management/help/configuration-profile-to-restrict-screen-capturing-on-mac/)2[Disable Find My options](https://www.hexnode.com/mobile-device-management/help/custom-configuration-profile-to-disable-find-my-options-in-macos-devices/)3[Apps notification settings](https://www.hexnode.com/mobile-device-management/help/manage-app-notification-settings-on-macos-devices-using-configuration-profiles/)4[Add custom fonts](https://www.hexnode.com/mobile-device-management/help/add-custom-fonts-on-macos-devices-using-a-configuration-profile/)5[Skip Touch ID setup](https://www.hexnode.com/mobile-device-management/help/custom-configuration-profile-to-skip-touch-id-setup-on-macos-devices/)6[Remove Restart button from Apple menu](https://www.hexnode.com/mobile-device-management/help/deploy-custom-configuration-profile-to-remove-the-restart-button-from-the-apple-menu-on-macos-devices/)7[Skip iCloud setup](https://www.hexnode.com/mobile-device-management/help/configuration-profile-to-skip-icloud-setup-for-new-users-on-macos-devices/)8[Skip Siri setup](https://www.hexnode.com/mobile-device-management/help/deploy-custom-configuration-profile-to-remove-the-siri-setup-from-the-setup-assistant-on-macos-devices/)9[Set time server and time zone](https://www.hexnode.com/mobile-device-management/help/set-time-server-and-time-zone-on-mac-using-configuration-profile/)10[Disable iCloud Drive](https://www.hexnode.com/mobile-device-management/help/configuration-profile-to-disable-icloud-drive-on-macos/)11[Open Safari at login](https://www.hexnode.com/mobile-device-management/help/configuration-profile-to-open-safari-at-login-in-mac/)12[Manage Chrome apps and extensions](https://www.hexnode.com/mobile-device-management/help/configuration-profile-to-manage-chrome-apps-and-extensions-on-mac/)13[Disable Incognito mode](https://www.hexnode.com/mobile-device-management/help/configuration-profile-to-disable-incognito-mode-on-macos-devices/)14[Install web apps](https://www.hexnode.com/mobile-device-management/help/configuration-profile-to-automatically-install-web-apps-for-macos-users/)15[Remove Restart from login screen](https://www.hexnode.com/mobile-device-management/help/configuration-profile-to-remove-the-restart-button-from-the-login-screen-of-mac/)16[Remove Shut Down option from Apple Menu](https://www.hexnode.com/mobile-device-management/help/configuration-profile-to-remove-shut-down-option-from-apple-menu-on-mac/)17[Disable iCloud sync for Desktop & Documents](https://www.hexnode.com/mobile-device-management/help/configuration-profile-to-disable-icloud-sync-for-desktop-documents-folders-on-mac/)18[Display host info at login](https://www.hexnode.com/mobile-device-management/help/configuration-profile-to-display-host-information-at-the-login-window-of-mac/)19[Add Chrome extensions](https://www.hexnode.com/mobile-device-management/help/custom-configuration-profile-to-add-chrome-extensions-on-macos-devices/)20[AirDrop discoverability settings](https://www.hexnode.com/mobile-device-management/help/configuration-profile-to-set-up-airdrop-discoverability-settings-on-mac/)21[Enable/Disable AirDrop](https://www.hexnode.com/mobile-device-management/help/configuration-profile-to-enable-disable-airdrop-on-macos-devices/)22[Disable Siri](https://www.hexnode.com/mobile-device-management/help/configuration-profile-to-disable-siri-on-macos-devices/)23[Configure Zoom app settings](https://www.hexnode.com/mobile-device-management/help/configuration-profile-to-change-zoom-app-settings-on-mac/)24[Disable Touch ID settings](https://www.hexnode.com/mobile-device-management/help/configuration-profile-to-disable-touch-id-settings-on-mac/)25[Customize Accessibility settings](https://www.hexnode.com/mobile-device-management/help/configuration-profile-for-macos-accessibility-settings/)26[Restrict primary accounts in Google Chrome](https://www.hexnode.com/mobile-device-management/help/restrict-primary-accounts-in-google-chrome-for-mac/)27[Disable personalised advertising](https://www.hexnode.com/mobile-device-management/help/configuration-profile-to-disable-personalised-advertising-on-mac/)28[Enable private data](https://www.hexnode.com/mobile-device-management/help/configuration-profile-to-enable-private-data-in-macos-unified-logs/)29[Disable App Store](https://www.hexnode.com/mobile-device-management/help/disable-macos-app-store-using-configuration-profile/)30[Disable shutdown from macOS login window](https://www.hexnode.com/mobile-device-management/help/configuration-profile-to-disable-shutdown-from-macos-login/)31[Manage access to iCloud services ](https://www.hexnode.com/mobile-device-management/help/configuration-profile-to-manage-access-to-icloud-services-on-mac/)32[Set up passcode settings](https://www.hexnode.com/mobile-device-management/help/configuration-profile-to-set-macos-passcode-settings/)33[Skip True Tone Display ](https://www.hexnode.com/mobile-device-management/help/configuration-profile-to-skip-true-tone-display-for-macos-users/%0A)34[Managed Login and background Items](https://www.hexnode.com/mobile-device-management/help/configuration-profile-to-set-managed-login-items-for-mac/)35[Configure Spotlight settings](https://www.hexnode.com/mobile-device-management/help/configure-spotlight-settings-on-macs-using-configuration-profiles/)36[Preferences for Office ](https://www.hexnode.com/mobile-device-management/help/configuration-profile-to-set-preferences-for-office-on-mac/)37[Disable guest accounts ](https://www.hexnode.com/mobile-device-management/help/configuration-profile-to-disable-guest-accounts-on-mac/)38[Managing Dock settings ](https://www.hexnode.com/mobile-device-management/help/configuration-profile-to-customize-dock-settings-on-mac/)39[Manage Safari settings](https://www.hexnode.com/mobile-device-management/help/configuration-profile-to-manage-safari-settings-on-macs/)40[Require username and password on Mac login window](https://www.hexnode.com/mobile-device-management/help/require-username-and-password-at-mac-login-window-using-custom-profiles/)41[Managed Login Items](https://www.hexnode.com/mobile-device-management/help/configuration-profile-to-create-managed-login-items-on-macos/)42[Disable fast user switching](https://www.hexnode.com/mobile-device-management/help/configuration-profile-to-disable-fast-user-switching-on-mac/)43[Configure energy saver settings](https://www.hexnode.com/mobile-device-management/help/configure-energy-saver-settings-on-mac-with-configuration-profiles/)44[Disallow modifications to Bluetooth](https://www.hexnode.com/mobile-device-management/help/disallow-modifications-of-bluetooth-settings-on-macos-devices/)45[Associated domains settings](https://www.hexnode.com/mobile-device-management/help/configuration-profile-for-associated-domains-settings-for-macos-devices/)46[Configure OneDrive sync app](https://www.hexnode.com/mobile-device-management/help/configure-onedrive-sync-app-on-mac-using-custom-profiles/)47[Disallow account modification](https://www.hexnode.com/mobile-device-management/help/configuration-profile-to-disallow-account-modification-on-macos-devices/)