@discoveranother   For your second question - it sounds like you are referring to the Restrictions on the Settings page. Is that right?   Under "Cross Platform Restrictions", deselecting "Allow installing apps" will turn off the user's and SM's ability to install applications.      The more popular option would be to use the restriction under "ios restrictions (supervised)" to deselect "Allow App Store".  This works for supervised devices on ios 9 and above and will still allow you to push apps and updates through SM 🙂       ... View more