| Functional Domain | Windows 10/11 | macOS | ChromeOS | Android (AOS) | iOS / iPadOS | Execution Mechanism and Architecture |
|---|---|---|---|---|---|---|
| Enrollment Flows | Native MDM / Windows Autopilot / MSI Agent | ADE (DEP) or enrollment profile + PKG installer | Google Workspace API / Chrome Extension | Android Enterprise (Zero-Touch / QR Code / Work Managed) | Apple MDM / ADE (DEP) / Configurator | Native and Agent: Supports Zero-Touch, QR code and assisted onboarding across all 6 platforms without requiring DepEd production credentials. |
| Configuration and Policies | Supported (CSP / Agent) | Supported (MDM Profiles) | Supported (Cloud Policy) | Supported (Android Enterprise Profiles) | Supported (MDM Configuration Profiles) | Centralized Profiles: Base policies (Wi-Fi, certificates, time settings, restrictions) centrally deployed from the IMTLazarus console. |
| Hardware and OS Restrictions | Supported (Total Lock / Kiosk) | Supported (Peripheral and System Lock) | Supported (OS and Device Restrictions) | Supported (Camera Lock, USB, Unknown Sources) | Supported (Camera Lock, App Store, ScreenTime) | Hardware-Level Control: Disables camera, external storage, USB and non-educational functions natively via OS API. |
| Application Governance | Supported (MS Store / MSI / Win32) | Supported (VPP / PKG / DMG) | Supported (Chrome Web Store / PWA / Android Apps) | Supported (Managed Google Play Store) | Supported (Apple School Manager / VPP) | Silent Deployment: Silent app provisioning without requiring the student's individual Apple ID or Google Account credentials. |
| Inventory and Audit Visibility | Supported (Full Telemetry) | Supported (Full Telemetry) | Supported (OS Telemetry and Sync) | Supported (Hardware and OS Telemetry) | Supported (Hardware and OS Telemetry) | Live Device Logs: Real-time reporting of hardware UUID, OS/firmware version, compliance status, network IP and active profiles. |
| Remote Actions | Supported (Lock, Shutdown, Hibernate, Restart, Log Out) | Supported (Browser and App Lock, Restart) | Supported (Lock) | Supported (Remote Lock, Wipe, Restart) | Supported (Remote Lock, Wipe, Clear Passcode) | On-Demand Commands: Initiated live from the admin console with timestamp audit trail, execution latency and completion status. |
| Web and Content Filtering | Supported (DNS Level + Anti-Bypass Agent) | Supported (Supervised Web Filter via extension) | Supported (Native Extension + Network Policy) | Supported (Always-On VPN / DNS Protection) | Supported (Supervised Web Filter via IMTGo browser) | Anti-Bypass Protection: Enforces SafeSearch, YouTube restriction and over 100 educational categories regardless of network or local DNS changes. |
| AI Safeguarding and Risk Detection | Supported (NLP Behavior Monitoring) | Supported (Keyword Safeguarding and Web NLP) | Supported (Real-Time NLP Engine Web & Chat) | Supported (Keyword Safeguarding and Web NLP) | Supported (Keyword Safeguarding and Web NLP) | Proactive AI Engine: Real-time detection of self-harm, cyberbullying, radicalization and idioms (Tagalog/English). |
| Offline Execution and Reconnection Sync | Supported (Local Policy Cache) | Navigation block upon connection loss, maintaining security policies | Supported (Offline Cache) | Supported (Local Execution Cache) | Navigation block upon connection loss, maintaining security policies | Offline-First Execution: Policies are maintained during offline use; audit logs are locally queued and synced upon reconnection. |