Explore iOS/iPadOS 18 and visionOS 2 upgrades for the enterprise
Discover the major features and functionalities from the iOS 18, iPadOS 18 and visionOS 2 releases as well as Managed Apple Accounts.

Apple has announced iOS 18, iPadOS 18, tvOS 18, watchOS 11, and visionOS 2. Jamf is excited to bring same-day compatibility for these operating systems. You can read more about same-day compatibility, its importance, and the newest Apple features Jamf Pro supports in this Jamf Pro 11.9 release blog.
As Apple continues to evolve how employees work, Jamf is evolving how we enable organizations to succeed with their new operating systems. By delivering operating system compatibility, admins can be confident their current workflows remain intact. And with support for key MDM features, admins can introduce new workflows into their environment.
Organizations of all types look for ways to improve management and security processes — including safely implementing new MDM features and reducing security vulnerabilities all while enhancing the end-user experience. With the release of every Apple operating system today, Apple has once again helped organizations do exactly that. Read on for highlights of key features new to iOS 18, iPadOS 18, visionOS 2.0.
iOS & iPadOS 18
Apple Intelligence
The first set of Apple Intelligence features will be available next month for iOS 18.1, iPadOS 18.1 and macOS Sequoia 15.1. At that time, we intend to make support available for managing Apple Intelligence features on managed devices based on the documentation Apple has shared. Organizations can test Apple Intelligence features with iOS and iPadOS 18.1 betas. Jamf Pro 11.9 supports the beta MDM restrictions to allow or disallow Apple Intelligence features like Genmoji, Image Playground, Image Wand and Writing Tools. To learn how your organization will be able to allow or disallow the different Apple Intelligence beta features with Jamf Pro, read our release blog linked above.
Home screen customization
iPhone and iPad can now display apps and widgets exactly where their users want them to appear on the Home Screen. For organizations that deploy devices for a specific purpose, this new feature can help their deskless employees. For example, an often-used app can be placed at the bottom of the screen for faster access.
Lock or hide an app
Apple is well known for protecting user privacy. That continues to be true with users now be able to lock or hide an app on iPhone or iPad. This exciting feature for iOS 18 and iPadOS 18 users prevents a protected app from launching unless the user authenticates with biometrics or a passcode. Furthermore, data contained within protected apps does not appear in other areas of the system for added peace of mind, such as:
- Search
- Notifications
- Spotlight
- Siri
- Call history
- Maps
Mobile devices are used across the enterprise for countless use cases. Employees use iPhone as their BYO device (which includes personal and work accounts). Airline staff check in passengers on a flight. Retail associates access and use shared devices in retail for inventory, point-of-sale or training materials, In all of these examples, data on an iPhone is sensitive as it's corporate, personal, or often both. By providing a built-in mechanism to lock an app, Apple is giving organizations and users a powerful new privacy control.
Apple Vision Pro
Organizations are exploring the potential of Apple Vision Pro in a variety of ways. Knowledge workers and executives use them for immersive experiences. And workers in the field, warehouse or retail locations continue to expand their reliance on Vision Pro, including for guided work and 3D collaborative design.
When Apple released visionOS 1.1 – which added support for mobile device management – Jamf was there to support management on the day it released.
The visionOS 2.0 upgrade offers the ability to enroll Apple Vision Pro into MDM via Automated Device Enrollment. This enrollment method automatically configures institutionally-owned Mac, iPhone, iPad, Apple Vision Pro and Apple TV devices as soon as the user turns it on. This requires no IT interaction. Along with the great user and admin benefits, enrolling devices via Automated Device Enrollment is the only way to prevent users from removing the MDM profile from that device.

Apple Vision Pro enrolling into a Jamf MDM via Automated Device Enrollment
With visionOS 2.0, organizations can now take advantage of this seamless enrollment method and provide a method to preconfigure an Apple Vision Pro used by an employee. This means that admins can deploy applications to Apple Vision Pro devices just as they do on iPhone or iPad.
What other MDM features does Jamf Pro support on Apple Vision Pro?
Device enrollment
Jamf supports multiple enrollment types, depending on whether Apple Vision Pro is institutionally-owned or personally-owned. Apple Vision Pro with visionOS 1.1 or later can be enrolled into management in two ways:
- Account-driven User Enrollment will initiate privacy-preserving device management designed for personal devices used at work. Work data and personal data are separated, and built-in data protections ensure company data is secured and only accessible to work apps and accounts. Personal apps and data are not visible to IT and personal data cannot be erased by IT.
- Account-driven device enrollment will initiate device management designed for institutionally-owned devices. Device management has full inventory visibility and includes support for erasing a device remotely via MDM.
Configuration
Deploying supported configuration profiles to Apple Vision Pro streamlines the user experience, protects company data and pre-configures apps and accounts to access work resources. Some key configuration profiles supported with visionOS 2.0 include:
- ACME (Applies only to Apple Vision Pro devices enrolled via Automated Device Enrollment)
- Wi-Fi
- VPN
- Restrictions
- Contacts
- Calendar
- Certificates
- Exchange ActiveSync
- DNS Settings
… and more!
App deployment
The App Store for Apple Vision Pro has more than 2,000 apps built specifically for visionOS, as well as more than 1.5 million compatible iOS and iPadOS apps. With MDM support, organizations can now automatically install and configure apps used for work or make them available in Self Service.
Enterprise APIs
Developers can leverage the new Enterprise APIs for visionOS to create spatial experiences in their apps. There are two categories and each category includes three APIs.
Category 1: enhance sensor access and improve visual capabilities
- Main camera access
- Passthrough in-screen capture
- Spatial barcode and QR code scanning
Category 2: platform control
- Apple Neural Engine Access
- Object-tracking parameter adjustment
- Increased performance headroom
In Apple’s WWDC session "Introducing enterprise APIs for visionOS," Apple describes designing these new APIs as ‘building blocks’ for business applications. Apple Vision Pro has enormous potential in the enterprise and the new APIs will help businesses develop visionOS applications for diverse use-cases. Today, organizations are already using Apple Vision Pro to train employees, for guided work that overlays instructions in real-world environments, and to collaborate on a new product design. The new APIs will allow businesses to reimagine and extend their workflows for spatial computing.
Apple Business Manager support
Apple Business Manager now shows the Activation Lock status of all Apple devices that support that feature, and allows authorized device manager users to easily disable Activation Lock when needed. On top of that, when your organization purchases Apple Vision Pro or Apple Watch devices from Apple, an authorized reseller, or a cellular carrier, they now appear in your Apple Business Manager account too.
These enhancements to Apple Business Manager will help organizations take better inventory of their devices. And for Apple Vision Pro, it allows those devices to enroll into management via Automated Device Enrollment.
Platform Updates
Managed Apple Account
Formerly known as Managed Apple IDs, Managed Apple Accounts are designed specifically for use by a business or school. Similar to Personal Apple Account, a Managed Apple Account is created to personalize a device and software. Together with Apple Business Manager, administrators can easily create a Managed Apple Account for each employee, using their existing company credentials. Updates to Managed Apple Accounts impacts any type of Apple device managed at your organization.
This year, IT admins will have the ability to limit new Apple Accounts created on their domain to be only Managed Apple Accounts. On top of that, admins can now capture Apple Accounts that use their organization’s domain without need to connect to an Identity Provider (IdP). This will help organizations manage and own all Apple Accounts using their domain.
But that is not all for Managed Apple Account. Users will also be able to convert their existing account into a Managed Apple Account (e.g. – If a user leveraged a Personal Apple Account for work purposes). By converting the existing account to a Managed Apple Account, it automatically adds that account to an organizations Apple Business Manager or Apple School Manager portal.
Jamf support for your updates
Apple releases are always an exciting time for Apple IT and security admins. At Jamf, we look forward to exploring how we can support these new features and help our customers integrate them into their device ecosystem.
Discover how Jamf Pro can help you get the most out of these exciting new OS features.