Controls overview

A control applies one setting or behavior to the devices you target: all devices, specific device groups, or a custom target. Create controls from MDM > Controls > Add new control, then choose the platform. Once a control is deployed, MDM compliance checks that every targeted device still reports the expected state.

Available controls

OS updates

Control	macOS	Windows	Linux	iOS / iPadOS	Android
Enforce minimum OS version	✅	✅		✅
Automatic app and OS updates	✅

Security

Control	macOS	Windows	iOS / iPadOS	Android
Password and screenlock	✅	✅	✅	✅
Disk encryption	✅	✅
Firewall	✅	✅
recoveryOS protection	✅
Lock MDM profiles pane	✅

Restrictions

Control	macOS	Windows	Linux
App blocking	✅
AirDrop restriction	✅
Screen capture blocking	✅
USB storage blocking	✅	✅	✅

Local admin accounts

Control	macOS	Windows	Linux	iOS / iPadOS	Android
Admin management	✅	✅
Admin password rotation	✅	✅

Control	macOS	Windows
Mac login with Primo	✅
Mac login with Entra	✅
Mac login with Okta	✅
Windows login with Okta		✅

Device configuration

Control	macOS	Windows	Linux	iOS / iPadOS	Android
Wi-Fi	✅	✅	✅	✅	✅
Google Chrome	✅	✅
Device naming	✅	✅	✅
Remote access	✅	✅	✅
AirPrint	✅

Custom configuration

Control	macOS	Windows	Linux	iOS / iPadOS	Android
Custom file	✅	✅		✅	✅
Generate settings via AI	✅			✅

Welcome to Primo

Platform configuration

Onboardings & Offboardings

AI Agents

Helpdesk

Device Management

Endpoint Protection

SaaS Management

Global Purchasing

Available controls

OS updates

Security

Restrictions

Local admin accounts

Device configuration

Custom configuration

​Available controls

​OS updates

​Security

​Restrictions

​Local admin accounts

​Login and SSO

​Device configuration

​Custom configuration

​Related articles

Available controls

OS updates

Security

Restrictions

Local admin accounts

Login and SSO

Device configuration

Custom configuration

Related articles