Hacker News Reader

Technical nitpick - joining the computer to an Active Directory domain will also let you configure this, not just MDM.

Fair point. However I don’t know any casual users with easy access to AD.