Favicon

You are here: Home > Device Management > Get Started > How to configure the maximum Auto-Lock time

How to configure the maximum Auto-Lock time

Learn how to configure the Auto-Lock setting on Apple devices using Applivery to enforce security policies and manage device inactivity.

In corporate environments, defining the correct automatic lock time on Apple devices—such as iPads—is essential to balance security and usability. An Auto-Lock value that is too short may disrupt daily workflows, while an excessively long value can increase security risks.

With Applivery, administrators can centrally enforce the maximum inactivity time before a device automatically locks and requires a passcode, ensuring compliance with organizational security policies across all managed Apple devices.

Prerequisites

Before applying this configuration, ensure that:

  • The Apple device is supervised (enrolled through Apple Business Manager / DEP).
  • The policy is correctly assigned to the target device(s).
  • A passcode is enabled on the device.

Configuration

1
Access Policies in Applivery Dashboard

Once in the Applivery dashboard, head to the Device Management section and select Policies (1). Choose the policy where you want to apply this setting.

2
Add Passcode Configuration

From the left-hand menu, navigate to the + Add configuration (2) option and then choose Passcode (3).

3
Configure Auto-Lock

Within the Passcode configuration, locate the Auto-Lock field and enter the desired value in minutes. This value represents the maximum amount of time the device can remain inactive before it automatically locks and prompts the user for the passcode.

passcode-configuration

auto-lock

Allowed values and behavior

The Auto-Lock parameter defines a maximum inactivity window rather than an optional suggestion. Apple enforces strict limits on this setting through MDM. The minimum supported value is immediate lock (0 minutes), which is generally discouraged except in highly secure environments. The maximum supported value is 15 minutes.

Warning

Apple does not provide a Never option for Auto-Lock via MDM, and it is not possible to fully disable this behavior on supervised devices.

Effects of applying this configuration

Once this configuration is applied, users will no longer be able to increase the Auto-Lock time from the device’s local settings. The system will always lock after the defined period of inactivity, even when the maximum value is configured. This ensures that unattended devices do not remain unlocked indefinitely.

Important considerations

No MDM solution, including Applivery, can keep the screen permanently on through Auto-Lock settings. The maximum realistic and recommended value remains 15 minutes, which provides a reasonable compromise between security and usability.

For scenarios where the screen must remain continuously active—such as kiosks, digital signage, or point-of-sale systems—Auto-Lock is not the appropriate mechanism. In these cases, it is strongly recommended to use Kiosk Mode (App Lock Mode) or a dedicated application designed for always-on operation.

Scenario Recommendation
Standard corporate use Auto-Lock set to 10–15 minutes.
Shared device Short Auto-Lock (5–10 minutes).
Kiosk / front desk App Lock Mode.

Applivery allows administrators to centrally manage Auto-Lock behavior on Apple devices, helping organizations maintain compliance with security policies while minimizing user friction. Although iPadOS does not allow Auto-Lock to be completely disabled via MDM, configuring the maximum supported value offers an effective balance between protection and user experience.