Apple has released macOS Server 5.3 with added support for new Configuration Profile payload changes and commands introduced in iOS 10.3 (see “iOS 10.3 Adds New File System, Find My AirPods, and More,” 27 March 2017). You’ll be able to configure restrictions for Dictation, limit modification of AirPlay and View Screen permission settings, restrict Wi-Fi network connections to managed networks, initiate a restart or shut down, and play the Lost Mode sound on a device.
For managed Macs running macOS 10.12.4 Sierra (see “Apple Releases macOS 10.12.4, watchOS 3.2, and tvOS 10.2,” 27 March 2017), macOS Server 5.3 enables admins to restrict access to iCloud Drive, iCloud Desktop and Documents, iCloud Keychain, and the capability to allow Touch ID to unlock a supported Mac. The release also enhances control over caching server size, adds support for setting a device name at enrollment time, and brings a new Classroom configuration option that allows modification of AirPlay and View Screen permissions on student devices.
Profile Manager in macOS Server 5.3 also now supports the new device management capabilities introduced in tvOS 10.2. Admins can configure Device Enrollment Program settings, install enterprise apps, create new Conference Room Display and Single App Mode profile payloads, and configure restrictions to disable AirPlay and pairing with the Remote app. Profile Manager can also set the name of Apple TVs, restart them, and erase them. ($19.99 new, free update, 198 MB, release notes and security content, 10.12.4+)