Policy Management

Policy Management

How do I create a policy?

1. Select EMM Console tab. This opens to the Policies tab below by default.

2. Click New Policy.

3. Select a profile for the policy based on business needs: Managed Devices, Work Devices, or Dedicated Devices.

1. On the Edit Policy page, change the Display Name field from the default “New Policy” placeholder to one that describes the policy.

2. Click Save Progress periodically while customizing the policy.

3. When finished customizing the policy properties, click Complete.

What is a Managed Devices policy?

1. A Managed Devices policy is intended for company-owned devices. It gives the IT Admin full control over the apps and data on devices under the policy.

2. By default, a Managed Devices policy:

   • Disallows unknown sources, untrusted app installs, and debugging features.

   • Applies password policies to device login and major device settings changes.

What is a Work Devices policy?

1. A Work Devices policy is intended for bring-your-own-device (BYOD) scenarios. The employee has separate accounts on one device for personal and work. The employee has the ability to turn the work account off and on and completely remove the work account at any time. The IT Admin has extensive control over the work account, but limited control over settings that span work and personal.

2. By default, a Work Devices policy:

   • Disallows unknown sources, untrusted app installs, and debugging features.

   • Applies password policies to work profile settings changes and unlocking work apps.

What is a Dedicated Devices policy?

1. A Dedicated Devices policy is intended for company-owned single-use devices (e.g. inventory management, sign-in kiosks, digital signage, etc.). The device can be locked down to access only a single app or set of apps. The employee has no recourse to exit this kiosk mode or access apps, data, or settings outside of it.

2. By default, a Dedicated Devices policy:

   • Disallows unknown sources, untrusted app installs, and debugging features.

   • Disallows rebooting into safe boot

   • Disallows factory reset from device

   • Disallows modifying accounts and users on the device

   • Disallows screen capture

   • Disallows Bluetooth contact sharing

   • Disables camera

   • Disables an Easter egg game in Settings

   • Applies password policies to device login and major device settings changes.

How do I schedule a policy to be applied later?

1. Select EMM Console tab. This opens to the Policies tab below by default.

2. Click View Policy on the policy that is intended to be scheduled.

3. Click Edit Policy button in upper right hand corner to make changes to policy. Make any desired changes.

1. Click Save Progress as Draft button in lower right hand corner.

2. Click Schedule button that is now displayed and select a date and time from the pop-up window for the policy to be enforced on devices.

1. Click Schedule for Later. The scheduled change will be displayed in the Scheduled Policies tab within Policies. There the scheduled change can be edited, deleted, unscheduled, or rescheduled.

How do I delete a policy?

1. Select EMM Console tab. This opens to the Policies tab below by default.

2. Select a policy with no devices linked and click Delete Policy.

3. In the confirmation box, click Delete.