In corporate environments, defining the correct automatic lock time on Apple devices—such as iPads—is essential to balance security and usability. An Auto-Lock value that is too short may disrupt daily workflows, while an excessively long value can increase security risks.
With Applivery, administrators can centrally enforce the maximum inactivity time before a device automatically locks and requires a passcode, ensuring compliance with organizational security policies across all managed Apple devices.
Prerequisites #
Before applying this configuration, ensure that:
- The Apple device is supervised (enrolled through Apple Business Manager / DEP).
- The policy is correctly assigned to the target device(s).
- A passcode is enabled on the device.
Configuration #
Once in the Applivery dashboard, head to the Device Management section and select Policies (1). Choose the policy where you want to apply this setting.
From the left-hand menu, navigate to the + Add configuration (2) option and then choose Passcode (3).
Within the Passcode configuration, locate the Auto-Lock field and enter the desired value in minutes. This value represents the maximum amount of time the device can remain inactive before it automatically locks and prompts the user for the passcode.
Allowed values and behavior #
The Auto-Lock parameter defines a maximum inactivity window rather than an optional suggestion. Apple enforces strict limits on this setting through MDM. The minimum supported value is immediate lock (0 minutes), which is generally discouraged except in highly secure environments. The maximum supported value is 15 minutes.
Effects of applying this configuration #
Once this configuration is applied, users will no longer be able to increase the Auto-Lock time from the device’s local settings. The system will always lock after the defined period of inactivity, even when the maximum value is configured. This ensures that unattended devices do not remain unlocked indefinitely.
Important considerations #
No MDM solution, including Applivery, can keep the screen permanently on through Auto-Lock settings. The maximum realistic and recommended value remains 15 minutes, which provides a reasonable compromise between security and usability.
For scenarios where the screen must remain continuously active—such as kiosks, digital signage, or point-of-sale systems—Auto-Lock is not the appropriate mechanism. In these cases, it is strongly recommended to use Kiosk Mode (Single App Mode) or a dedicated application designed for always-on operation.
Recommended use cases #
Applivery allows administrators to centrally manage Auto-Lock behavior on Apple devices, helping organizations maintain compliance with security policies while minimizing user friction. Although iPadOS does not allow Auto-Lock to be completely disabled via MDM, configuring the maximum supported value offers an effective balance between protection and user experience.