Policies

Get Policies

This API returns the list of all polices across all devices in the Ivanti EPMM system.

Example:

https://<Ivanti EPMM>/api/v1/policies

URI:
https://{host-name}/api/v1/policies

Returns list of all policies installed across all devices.

Http Method:

GET

Format:

xml, json

 

 

Response Status Code:

 

‘404 – No Data Found’

There is no data.

‘200 – OK’

Data is present and the response is returned.

Response:

 

<policyWebServiceResponse>

 

    <messages>

 

        <message> 1 policy returned.</message>

Status Message.

Policy count is shown if the method execution is successful.

A descriptive error message is shown if the method execution failed.

    </messages>

 

<policies>

 

        <policy id="-2">

 

                <policyName>Default Privacy Policy</policyName>

Policy name.

                <policyType>DEFAULT</policyType>

Policy Type. Either DEFAULT or ENTERPRISE.

                <profileType>PRIVACY</profileType>

Profile type. Either PRIVACY, SECURITY, LOCKDOWN, or SYNC.

                <status>Active</status>

Active or Inactive.

                <active>true</active>

Whether the policy is active.

true means Active.

false means Inactive.

                <defaultPolicy>false</defaultPolicy>

Deprecated.

                <description>Default Privacy Policy</description>

Policy description.

                <deviceCount>1</deviceCount>

Number of devices for which the policy is applied.

                <pendingCount>1</pendingCount>

Number of devices for which the policy is pending.

                <priority>1</priority>

Priority

                <rules>

Policy rules, which consist of type-value pairs. The set of type-value pairs are listed in Section Policy Rules Policy Rules.

 

The rule shown here is only an example.

                  <rule>

 

                    <type>PRIVACY_SYNC_CALLLOGS</type>

Rule type

                    <value>store</value>

 

                    <clientValue>off</clientValue>

 

                </rule>

 

                  ….

 

                <rules>

 

        </policy>

 

    </policies>

 

</ policyWebServiceResponse >

 

Get Policies by DeviceUUID

This API returns the list of all polices by device uuid in the Ivanti EPMM system.

Example:

https://<Ivanti EPMM>/api/v1/policies/devices/027d9439-0f75-4d30-8d7d-120b4cb8646b

URI:
https://{host-name}/api/v1/policies/devices/{deviceuuid}

Returns list of all policies by device uuid.

Http Method:

GET

Format:

xml, json

 

 

Response Status Code:

 

‘404 – No Data Found’

There is no data.

‘200 – OK’

Data is present and the response is returned.

Response:

 

<policyWebServiceResponse>

 

    <messages>

 

        <message> 1 policy returned.</message>

Status Message.

Policy count is shown if the method execution is successful.

A descriptive error message is shown if the method execution failed.

    </messages>

 

<policies>

 

        <policy id="-2">

 

                <policyName>Default Privacy Policy</policyName>

Policy name.

                <policyType>DEFAULT</policyType>

Policy Type. Either DEFAULT or ENTERPRISE.

                <profileType>PRIVACY</profileType>

Profile type. Either PRIVACY, SECURITY, LOCKDOWN, or SYNC.

<status>Active</status>

Active or Inactive.

                <active>true</active>

Whether the policy is active.

true means Active.

false means Inactive.

<defaultPolicy>false</defaultPolicy>

Deprecated.

                <description>Default Privacy Policy</description>

Policy description.

                <deviceCount>0</deviceCount>

This field is not applicable for this request.

                <pendingCount>0</pendingCount>

This field is not applicable for this request.

                <priority>1</priority>

Priority

                <rules>

Policy rules, which consist of type-value pairs. The set of type-value pairs are listed in Section Policy Rules Policy Rules.

 

The rule shown here is only an example.

                  <rule>

 

                    <type>PRIVACY_SYNC_CALLLOGS</type>

Rule type

                    <value>store</value>

 

                    <clientValue>off</clientValue>

 

                </rule>

 

                  ….

 

                <rules>

 

        </policy>

 

    </policies>

 

</ policyWebServiceResponse >

 

Apply/Remove policy for a label.

This API applies a policy to a label or removes a policy from a label.

Example:

https://<Ivanti EPMM>/api/v1/policies/-2?action=apply_label&label=Testlabel

URI:
https://{host-name}/api/v1/policies/{policyid}

Returns status.

Http Method:

PUT

Format:

xml, json

 

 

Response Status Code:

 

‘404 – No Data Found’

There is no data.

‘200 – OK’

Data is present and the response is returned.

Request:

 

policyid

Required. The internally generated policy ID. Use the Get Policies and Get Policies by DeviceUUID to determine a policy’s ID.

action

Required. This parameter is a query parameter.

 

“apply_label” – to apply the label to the policy
“remove_label” – to remove the label from the policy

label

Required. Label name.

 

This parameter is a query parameter.

Response:

 

<policyWebServiceResponse>

 

    <messages>

 

        <message>

                 Policy applied to label Android successfully.

        </message>

Status Message.

A descriptive error message is shown if the method execution failed.

    </messages>

 

<policyWebServiceResponse>

 

Policy Rules

An HTTP response that contains information about a policy includes a <rules> element made up of many <rule> elements.

For example:

<rules>
	<rule>
		<type>SYNC_HEARTBEAT_INTERVAL</type>
		<value>14</value>
		<clientValue>840</clientValue>
	</rule>
<rule>
		<type>SYNC_MULTITASK_INTERVAL</type>
		<value>15</value>
		<clientValue>15</clientValue>
	</rule>
</rules>

The following tables show the values of these <type> elements, their meanings, and possible values.

Note: The <clientValue> element is deprecated. Ignore its values.

Security policy rules

The following table shows the rules for security policies, listed alphabetically by the name of the <type> field.

Note: Not all the security rules apply to all device types.

For information about security policies, see the Ivanti EPMM Administration Guide.

Security policy rule <type> field

Description

Values

EAS_BLOCK_ANDROID_DATA_ENC

Whether to take an action when data encryption is disabled on an Android device.

Value: true or false

ClientValue: deprecated.

EAS_BLOCK_ANDROID_DEVICE_ADMIN_DEACTIVE

Whether to take an action  when Ivanti EPMM detects that the device administrator privilege has been removed from the Ivanti EPMM app.

Value: true or false

ClientValue: deprecated.

EAS_BLOCK_ANDROID_OS

The version of Android below which Ivanti EPMM takes an action.

Value: An Android version number.

For example: 2.3

ClientValue: deprecated.

EAS_BLOCK_ANDROID_ROOTED

Whether to take an action when Ivanti EPMM detects an Android device that has been rooted.

Value: true or false

ClientValue: deprecated.

EAS_BLOCK_IOS_DEVICE_MDM_DEACTIVE

Whether to take an action when Ivanti EPMM detects that the MDM profile has been removed from an iOS device.

Value: true or false

ClientValue: deprecated.

EAS_BLOCK_IPHONE_DATA_ENC

 

Whether to take an action when data encryption is disabled on an iOS device.

Value: true or  false

ClientValue: deprecated.

EAS_BLOCK_IPHONE_HW

Whether to take an action for particular iOS device models that the administrator has specified as disallowed.

Value:

false – No devices are disallowed.

Disallowed devices are specified in a comma-separated list of numbers. The numbers are:

1 – iPhone, original version

2 – iPhone 3G

3 – iPhone 3GS

4 – iPod touch, 1st gen

5 – iPod touch, 2nd gen

6 – iPod touch, 3rd gen

7 – iPad

16 – iPhone 4

18 – iPod touch, 4th gen

22 – iPad 2

28 – iPhone 4s

ClientValue: deprecated.

EAS_BLOCK_IPHONE_JAILBROKEN

Whether an iOS device has been compromised (jailbroken).

Value:

true – the device has been compromised.

false – the device has not been compromised.

ClientValue: deprecated.

EAS_BLOCK_IPHONE_OS

The iOS version below which Ivanti EPMM takes an action.

Value: An iOS version number.

Example: 3.0

ClientValue: deprecated.

EAS_BLOCK_OOC_DAYS

The number of days a device cannot connect to Ivanti EPMM before Ivanti EPMM takes an action.

Value: A number.

ClientValue: deprecated.

EAS_BLOCK_POLICY_DAYS

The specified number of days after which Ivanti EPMM takes an action when it detects that a device has not met policy requirements.

 

Value: A number.

ClientValue: deprecated.

SEC_NCA_ANDROID_DATA_ENC

The action to take when data encryption is disabled on an Android device.

Value:

0 – No action.

1 – Send alert.

2 – Block ActiveSync and send alert.

Other positive integers – Corresponds to a compliance action the Ivanti EPMM administrator created to disable or quarantine the device. Ivanti EPMM assigned an integer value to the action when the Ivanti EPMM administrator created the action.

ClientValue: deprecated.

SEC_NCA_ANDROID_DEVICE_ADMIN_DEACTIVE

The action to take when the device administrator is removed from an Android device.

Value:

0 – No action.

1 – Send alert.

2 – Block ActiveSync and send alert.

Other positive integers – Corresponds to a compliance action the Ivanti EPMM administrator created to disable or quarantine the device. Ivanti EPMM assigned an integer value to the action when the Ivanti EPMM administrator created the action.

ClientValue: deprecated.

SEC_NCA_ANDROID_ROOTED

The action to take when an Android device that has

been “rooted,” that is, root access has been given to an app. A rooted Android device is also called compromised.

Value:

0 – No action.

1 – Send alert.

2 – Block ActiveSync and send alert.

Other positive integers – Corresponds to a compliance action the Ivanti EPMM administrator created to disable or quarantine the device. Ivanti EPMM assigned an integer value to the action when the Ivanti EPMM administrator created the action.

ClientValue: deprecated.

SEC_NCA_ANDROID_SW

The action to take when the version of Android on a device is less than a specified version.

Value:

0 – No action.

1 – Send alert.

2 – Block ActiveSync and send alert.

Other positive integers – Corresponds to a compliance action the Ivanti EPMM administrator created to disable or quarantine the device. Ivanti EPMM assigned an integer value to the action when the Ivanti EPMM administrator created the action.

ClientValue: deprecated.

SEC_NCA_APP_CONTROL

The action to take when a device has violated app control rules.

Value:

No value – No action.

1 – Send alert.

2 – Block ActiveSync and send alert.

Other positive integers – Corresponds to a compliance action the Ivanti EPMM administrator created to disable or quarantine the device. Ivanti EPMM assigned an integer value to the action when the Ivanti EPMM administrator created the action.

ClientValue: deprecated.

SEC_NCA_IOS_DATA_ENC

The action to take when data encryption is disabled on an iOS device.

Value:

0 – No action.

1 – Send alert.

2 – Block ActiveSync and send alert.

Other positive integers – Corresponds to a compliance action the Ivanti EPMM administrator created to disable or quarantine the device. Ivanti EPMM assigned an integer value to the action when the Ivanti EPMM administrator created the action.

ClientValue: deprecated.

SEC_NCA_IOS_HW

The action to take when an iOS device is disallowed.

See EAS_BLOCK_IPHONE_HW for the list of disallowed devices.

Value:

0 – No action.

1 – Send alert.

2 – Block ActiveSync and send alert.

Other positive integers – Corresponds to a compliance action the Ivanti EPMM administrator created to disable or quarantine the device. Ivanti EPMM assigned an integer value to the action when the Ivanti EPMM administrator created the action.

ClientValue: deprecated.

SEC_NCA_IOS_JAILBROKEN

The action to take when an iOS device has been compromised (jailbroken).

Value:

0 – No action.

1 – Send alert.

2 – Block ActiveSync and send alert.

Other positive integers – Corresponds to a compliance action the Ivanti EPMM administrator created to disable or quarantine the device. Ivanti EPMM assigned an integer value to the action when the Ivanti EPMM administrator created the action.

ClientValue: deprecated.

SEC_NCA_IOS_MDM_DEACTIVE

The action to take when Ivanti EPMM detects that the MDM profile has been removed from an iOS device.

Value:

0 – No action.

1 – Send alert.

2 – Block ActiveSync and send alert.

Other positive integers – Corresponds to a compliance action the Ivanti EPMM administrator created to disable or quarantine the device. Ivanti EPMM assigned an integer value to the action when the Ivanti EPMM administrator created the action.

ClientValue: deprecated.

SEC_NCA_IOS_SW

The action to take when the iOS version is below a specified level.

Value:

0 – No action.

1 – Send alert.

2 – Block ActiveSync and send alert.

Other positive numbers – Corresponds to a compliance action the Ivanti EPMM administrator created to disable or quarantine the device. Ivanti EPMM assigned a number to the action when the Ivanti EPMM administrator created the action.

ClientValue: deprecated.

SEC_NCA_OOC_DAYS

The action to take when the device has not connected to Ivanti EPMM in a specified number of days.

Value:

0 – No action.

1 – Send alert.

2 – Block ActiveSync and send alert.

Other positive integers – Corresponds to a compliance action the Ivanti EPMM administrator created to disable or quarantine the device. Ivanti EPMM assigned an integer value to the action when the Ivanti EPMM administrator created the action.

ClientValue: deprecated.

SEC_NCA_POLICY_DAYS

The action to take when Ivanti EPMM detects that a device has not met policy requirements for the specified number of days.

Value:

0 – No action.

1 – Send alert.

2 – Block ActiveSynch and send alert.

Other positive integers – Corresponds to a compliance action the Ivanti EPMM administrator created to disable or quarantine the device. Ivanti EPMM assigned an integer value to the action when the Ivanti EPMM administrator created the action.

ClientValue: deprecated.

SECURITY_AV_BLOCK_DEVICES

Whether to run anti-virus scanning on the files of the device.

 

Applicable only to Blackberry devices.

Value: off

ClientValue: deprecated.

SECURITY_BLACK_WHITE_BMW_ACLS

A list of App Control Rules of type Allowed or Disallowed that are enabled in the security policy. The type Allowed (white-listed) or Disallowed (black-listed) is specified by the value of SECURITY_BLACK_WHITE_BMW_OPTION.

A comma-separated list of numbers that correspond to App Control Rules.  Ivanti EPMM assigned a number to the App Control Rule when the Ivanti EPMM administrator created the rule. The list can be empty.

For example:

3

3,6

ClientValue: deprecated.

SECURITY_BLACK_WHITE_BMW_OPTION

Whether App Control Rules listed in SECURITY_BLACK_WHITE_BMW_ACLS are of type Allowed (white-listed) or Disallowed (black-listed).

Value:

WHITE – the App Control Rules are of type Allowed.

BLACK – the App Control Rules are of type Disallowed.

ClientValue: deprecated.

SECURITY_ENCRYPT_DATA_TYPE

Whether the policy requires data encryption for each of these data types: Email, PIM, and documents.

Contains a <resourceDTOs> element for each data type.

<resourceDTOs>   

    <name>PIM</name>    

    <resourceType>PIM</resourceType>

    <value>on</value>

</resourceDTOs>

 

Possible values for <name> and <resourceType>: Email, PIM, MY_DOCUMENTS.

 

Possible values for <value>: on, off.

SECURITY_ENCRYPT_DEVICE

Whether the security policy requires device encryption.

Value:

on – Device encryption is required.

off – Device encryption is not required.

ClientValue: deprecated.

SECURITY_ENCRYPT_FILE_TYPE

Specifies which file types require data encryption. The possible file types are .doc, .xls, .pdf, .txt, media files, and others specified by the administrator.

A <resourceDTOs> element is specified for each of .doc, .xls, .pdf, .txt. and media files.

The <name> and <resourceType>  field values  of each  <resourceDTOs> element is either doc, xls, pdf, txt, MEDIA_FILES, or OTHER_FILE_TYPES.

The <value> field of each <resourceDTOs> element except OTHER_FILE_TYPES is either on or off.

The <value> field of each the OTHER_FILE_TYPE <resourceDTOs> element is a space-separated list of other file types.

ClientValue: deprecated.

SECURITY_ENCRYPT_SDCARD

Whether SD card encryption is required on the device.

Value:

on – SD card encryption required.

off – SD card encryption not required.

ClientValue: deprecated.

SECURITY_GRACE_PERIOD

The period of time during which the user is still able to enter the correct password after the device has been locked.

Value: The number of minutes.

ClientValue: deprecated.

Note that this field is applicable only if the password is mandatory, the maximum inactivity timeout is 0, and the device is an iOS device.

SECURITY_INACTIVITY_TIMEOUT

The maximum amount of time

to allow as an inactivity timeout.

Value:

A string describing the time. Possible values are:

0 minute

1 minute

2 minutes

3 minutes

4 minutes

5 minutes

15 minutes

30 minutes

1 hour

1.5 hours

2 hours

12 hours

24 hours

 

ClientValue: deprecated.

SECURITY_MANDATORY_BMW_ACLS

The list of App Control Rules of type Required that are enabled in the security policy.

A comma-separated list of numbers that correspond to App Control Rules of type Required.  Ivanti EPMM assigned a number to the App Control Rule when the Ivanti EPMM administrator created the rule. The list can be empty.

For example:

3

3,6

ClientValue: deprecated.

SECURITY_PWD_HISTORY

The number of passwords remembered to ensure that users define a different password.

Value: A number

ClientValue: deprecated.

Note that this field is applicable only if the password is mandatory.

SECURITY_PWD_LENGTH

The minimum length for the password.

Value: A number

ClientValue: deprecated.

Note that this field is applicable only if the password is mandatory.

SECURITY_PWD_MAX_AGE

The numbers of days after which the password will expire. 0 indicates no limit.

Value: The number of days.

ClientValue: deprecated.

SECURITY_PWD_MAX_FAILED_ATTEMPTS

The maximum number of times the user can enter an incorrect password before the device is wiped.

Value: A number.

ClientValue: deprecated.

Note that this field is applicable only if the password is mandatory.

SECURITY_PWD_MIN_COMPLEX_CHAR

The minimum number of special

characters that must be included in a password.

Value: A number

ClientValue: deprecated.

SECURITY_PWD_TYPE

Whether a mandatory password

should be simple numeric input, be restricted to alphanumeric characters, or neither (that is, Don’t Care).

Value:

alphanumeric - restricted to alphanumeric characters.

simple - restricted to simple numeric characters.

simple,alphanumeric  - restricted to either simple or alphanumeric characters.

nc – no restrictions apply to the password characters.

ClientValue: deprecated.

Note that this field is applicable only if the password is mandatory.

SECURITY_QUARANTINE_DEVICES

Deprecated.

Deprecated.

SECURITY_REQUIRE_PWD

Whether the user must enter a password before being able to access the device.

Value:

on – a password is mandatory

off – a password is optional

ClientValue: deprecated.

SECURITY_REQUIRE_VPN

Deprecated.

Deprecated.

SECURITY_VPN_PROFILE

Deprecated.

Deprecated.

SECURITY_WIPE

The number of days before removing all data from the device if the Ivanti EPMM Client does not connect to the Ivanti EPMM server.

Value: A number.

ClientValue: deprecated.

Lockdown policy rules

The following table shows the rules for lockdown policies, listed alphabetically by the name of the <type> field.

Note: Not all the lockdown rules apply to all device types.

For information about lockdown policies, see the Ivanti EPMM Administration Guide.

Lockdown policy rule <type> field

Description

Values

LOCKDOWN_BLUETOOTH

Whether Bluetooth should be disabled in the event that device access must be restricted.

on – Bluetooth audio and data should not be disabled.

audio - Bluetooth audio should not be disabled, but Bluetooth data should be disabled.

off – Bluetooth audio and data should be disabled.

ClientValue: deprecated.

LOCKDOWN_CAMERA

Whether the camera should be disabled in the event that device access must be restricted.

on – the camera should not be disabled.

off – the camera should be disabled.

ClientValue: deprecated.

LOCKDOWN_IRDA

Whether infrared should be disabled in the event that device access must be restricted.

on – infrared should not be disabled.

off – infrared should be disabled.

ClientValue: deprecated.

LOCKDOWN_SDCARD

Whether the SD card should be disabled in the event that device access must be restricted.

on – the SD card should not be disabled.

off – the SD card should be disabled.

ClientValue: deprecated.

LOCKDOWN_WIFI

Whether WIFI should be disabled in the event that device access must be restricted.

on – WIFI should not be disabled.

off – WIFI should be disabled.

ClientValue: deprecated.

Sync policy rules

The following table shows the rules for sync policies, listed alphabetically by the name of the <type> field..

Note: Not all the sync rules apply to all device types.

For information about sync policies, see the Ivanti EPMM Administration Guide.

Sync policy rule <type> field

Description

Values

SYNC_ALWAYS_CONNECTED

Whether the Ivanti EPMM client app should remain connected to Ivanti EPMM during the sync interval.

on – Remain connected.

off – Do not remain connected.

ClientValue: deprecated.

SYNC_APN_HOME_NETWORK

Whether an Access Point Name (APN) connection type should be used in a Blackberry’s home network.

on – Use an APN connection type.

off – Do not use an APN connection type.

ClientValue: deprecated.

SYNC_APN_ROAMING_NETWORK

Whether an Access Point Name (APN) connection type should be used in a Blackberry’s roaming network.

 

on – Use an APN connection type.

off – Do not use an APN connection type.

ClientValue: deprecated.

SYNC_BIS_HOME_NETWORK

Whether a Blackberry Internet Service (BIS) connection type should be used in a Blackberry’s home network.

on – Use a BIS connection type.

off – Do not use a BIS connection type.

ClientValue: deprecated.

SYNC_BIS_ROAMING_NETWORK

Whether a Blackberry Internet Service (BIS) connection type should be used in a Blackberry’s roaming network.

on – Use a BIS connection type.

off – Do not use a BIS connection type.

ClientValue: deprecated.

SYNC_BLOCK_WHEN_ROAMING

Whether to synch when the device is roaming.

on – Synchronization of all activity and content occurs even when roaming.

mai – Synchronization of only voice, SMS, and data traffic occurs when roaming.

roamingStatus – Synchronization is blocked when roaming. Sync only new country notification when roaming.

off – Synchronization of all activity and content is blocked when roaming.

ClientValue: deprecated.

SYNC_FULL_BG_MODE

Deprecated.

Deprecated.

SYNC_HEARTBEAT_INTERVAL

The maximum amount of time that the Ivanti EPMM client app will wait before sending a request to the Ivanti EPMM server to confirm that the client and server are connected.

A number in minutes.

For example:

14

ClientValue: deprecated.

SYNC_INTERVAL

The frequency for starting

the synchronization process

between the device and the

Ivanti EPMM server.

A number in minutes.

For example: 240

ClientValue: deprecated.

SYNC_MIN_BATTERY_POWER

The percentage of battery power at which to synchronize files between the device and the Ivanti EPMM server.

A number.

For example:

20

SYNC_MIN_FILE_UPLOAD_BATTERY_POWER

The minimum battery level

(%) to use for writing data from the device to Ivanti EPMM during the synchronization process.

A percentage.

For example:

60

ClientValue: deprecated.

SYNC_MULTITASK_INVERVAL

The minimum duration between attempts to send iOS device details to Ivanti EPMM.

A number in minutes.

For example:

15

ClientValue: deprecated.

SYNC_REQUIRE_TLS

Whether to use Transport

Layer Security for interactions

between Ivanti EPMM and the Ivanti EPMM client app on the device.

on – Using TLS is required.

off – Using TLS is not required.

ClientValue: deprecated.

SYNC_SDCARD

Whether to include files from removable storage devices, such as SD cards, when synchronizing files between the device and Ivanti EPMM.

on – Include files from removable storage.

off – do not include files from removable storage.

ClientValue: deprecated.

SYNC_SERVERIP

The IP address or host name of Ivanti EPMM that

the Ivanti EPMM client communicates with.

For example:

someServerName.mydomain.com

ClientValue: deprecated.

Privacy policy rules

The following table shows the rules for privacy policies, listed alphabetically by the name of the <type> field..

Not all the privacy rules apply to all device types.

For information about privacy policies, see the Ivanti EPMM Administration Guide.

Privacy policy rule <type> field

Description

Values

PRIVACY_APP_MULTITASK

Whether the iOS Ivanti EPMM client periodically performs functions without user interaction.

on – Periodically wakes up.

off – Does not periodically wake up.

ClientValue: deprecated.

PRIVACY_EXCLUDE_DIR

The file folders that are excluded from synchronization.

Contains a <resourceDTOs> element for each excluded folder.

For example:

<resourceDTOs>   

    <name> /Windows</name>    

    resourceType>DIR</resourceType>

    <value>on</value>

</resourceDTOs>

 

<name> -  lists the excluded directory. 

 

<resourceType> - always has value DIR.

 

<value> - always has value on.

PRIVACY_LOG_APP_ACTIVITY

Deprecated.

Deprecated.

PRIVACY_LOG_FILE_ACTIVITY
1. Deprecated.

Deprecated.

PRIVACY_LOG_WEBSITE_ACTIVITY

Deprecated.

Deprecated.

PRIVACY_SYNC_APPS

Whether to sync information about the installed apps.

track – Sync apps.

off – Do not sync apps.

ClientValue: deprecated.

PRIVACY_SYNC_BOOKMARKS

Deprecated.

Deprecated.

PRIVACY_SYNC_CALLLOGS

Whether to collect statistics on voice calls.

store – Collect voice call statistics.

off – Do not collect voice call statistics.

ClientValue: deprecated.

PRIVACY_SYNC_CONTACTS

Whether to sync contacts.

store – Sync contacts.

off – Do not sync contacts.

ClientValue: deprecated.

PRIVACY_SYNC_DATA_LOG

Whether to sync data traffic statistics.

track – Sync data traffic.

off - Do not sync data traffic.

PRIVACY_SYNC_DOCUMENTS

Whether to sync documents.

store – Sync documents.

off – Do not sync documents.

ClientValue: deprecated.

PRIVACY_SYNC_LOCATION

Whether to sync the location to the cell tower, the device’s GPS position, or not at all.

celltower – Sync cell tower data.

gps – Sync GPS data.

off – Do not sync location data.

PRIVACY_SYNC_MUSIC

Whether to sync music files.

store – Sync music files.

off – Do not sync music files.

ClientValue: deprecated.

PRIVACY_SYNC_OTHER_MEDIA

Whether to sync other files not specified by other privacy settings.

The file extensions of the types of files not to sync, as a comma-separated list. For example:

ram,wav

No <value> element means sync files of all types not specified by other privacy settings.

PRIVACY_SYNC_PICTURES

Whether to sync pictures.

store – Sync pictures.

off – Do not sync pictures.

ClientValue: deprecated.

PRIVACY_SYNC_SMSLOGS

Whether to collect SMS statistics, collect SMS statistics and store SMS data on the Ivanti EPMM server, or do neither.

track – Collect SMS statistics.

store – Collect SMS statistics and store SMS data.

off – Do not collect SMS statistics or store SMS data.

ClientValue: deprecated.

PRIVACY_SYNC_VIDEO

Whether to sync video files.

store – Sync video files.

off – Do not sync video files.

ClientValue: deprecated.