3.2.1.15 Ensure 'Allow modifying cellular data app settings' is set to 'Disabled'

Information

This recommendation pertains to modifying the use of cellular data by apps.

Rationale:
It is appropriate for an institution to have remote locating and erasure capability with their devices. Forcing cellular data to remain active is a means of supporting this goal.

Solution

1. Open Apple Configurator.
2. Open the Configuration Profile.
3. In the left windowpane, click on the Restrictions tab.
4. In the right windowpane, under the tab Functionality, uncheck the checkbox for Allow modifying cellular data app settings.
5. Deploy the Configuration Profile.

See Also

https://workbench.cisecurity.org/files/2141