Managing Policies

Ivanti EPMM uses policies to regulate the behavior of the devices it manages. Each policy consists of a set of rules. You can create multiple policies for each policy type, but only one active policy of each type can be applied to a specific device.

Refer to Getting Started with Ivanti EPMM for information on the most commonly used policy topics, such as:

Default policies
Security policies
Privacy policies
Lockdown policies
Sync policies

The topics in this chapter include the following advanced topics:

Working with default policies
Importing and exporting policies
Viewing policy status and platform support
Enabling profile encryption
Enabling or disabling encryption on a macOS device
Storing and retrieving FileVault personal recovery keys in Ivanti EPMM (macOS)
Configuring iOS and macOS software updates
Configuring notification settings
Configuring a system policy managed setting
Configuring a system policy control setting
Configuring a system policy rule
Configuring iOS and macOS software updates
Managing the activation lock for iOS devices
Whitelisting Wi-Fi networks
Configuring firewall settings for macOS devices
Sync policies and battery use
Global App Config Settings policy
Work Schedule policy
Country changes and alerts
iOS location-based wakeups interval and syncing with Ivanti EPMM
Single-app mode policies
Configuring a global HTTP proxy policy
Cellular policies
Wallpaper policies
Accessibility Settings policy
Device name policies
Customizing a home screen layout
Customizing a lock screen message
Configuring notification settings
tvOS policy settings
Notifications of changes to the privacy policy
Exporting the devices in the WatchList
Impact of changing LDAP server variables
Configuring encrypted DNS settings

For User Enrollment, Ivanti recommends using the label "Apple User Enrolled Device" + "Equals" + "True" or ios.apple_user_enrolled_device = true."