Configuration Types

This section contains the following topics:

Search a Configuration

Use the search and filter capability on the Choose Configurations page to find the configuration you want to apply.

Procedure

  1. Choose Configurations.
  2. Choose one of the configurations listed or click the +Add button.
  3. The Choose Configuration page is displayed

  4. Click one of the configurations listed or :
    • Enter the name of the configuration in the search box
    • Click a filter icon on the right of the search box to display configuration types compatible with platform.
  5. Click a configuration button to access configuration setting options.

For more information, see Working with Configurations.

Security

Type What It Does For These Devices Needs This License

Android Enterprise

Specifies Android Enterprise options

Android Enterprise

Silver

AppConnect Device

Specifies security settings AppConnect-enabled apps on devices

  • Android
  • iOS

Gold

Azure Active Directory (Azure Tenant)

By connecting Ivanti Neurons for MDM to the Azure Active Directory, you can use the device compliance status of managed devices for conditional access to Microsoft 365 apps.

  • iOS
  • Android

Certificate

Establishes trust with servers

  • Android
  • iOS
  • macOS

Certificate Transparency

Controls Certificate Transparency enforcement which can only appear in a device profile.

  • iOS
  • macOS
  • tvOS

Device Logging

Retrieves additional logs such as network and security logs from devices.

  • Android Enterprise

Android Encryption

Prompts users to start encryption.

Android

Encrypted DNS

Allows you to enhance security without needing to configure VPN.

  • iOS
  • macOS

Gold

Mobile Threat Defense

Protects managed devices from mobile threats and vulnerabilities affecting device, network, and applications.

  • Android
  • iOS

Threat Defense Local Actions

Create and distribute a device configuration defining the local actions to be taken on supported Android devices when the Threat Defense-enabled client detects a threat.

Android

FileVault 2

Provides ability to perform full XTS-AES 128 disk encryption on the contents of a volume.

macOS

Gold

FileVault Recovery Key

Determines settings for redirecting the FileVault recovery keys to a corporate server.

macOS

Gold

Identity Certificate

  • Authenticates the device to servers.
  • Authenticates the device to network resources.
  • Android
  • iOS
  • macOS

iOS Activation Lock

Enables the Apple Activation Lock feature on supervised devices.

iOS

Silver

iOS Custom Configuration

Distributes an iOS configuration profile that was created by a different app.

iOS

iOS Restrictions

  • Locks down device features.
  • Enables device features.

iOS

Conference Room Display

Turns on the Conference Room Display mode on Apple TV.

tvOS 10.2+

Lockdown & Kiosk: Android

  • Locks down device features.
  • Re-enables device features.
  • Applies the kiosk feature.

Android

Lockdown & Kiosk: Android Enterprise

  • Defines features and apps that are restricted on Android enterprise devices.
  • Applies the kiosk feature.

Android 5.0 +

Lockdown & Kiosk: Samsung Know Standard

  • Defines features and apps that are restricted on Samsung Knox Standard devices.
  • Applies the kiosk feature.

Samsung Knox

macOS Firewall

Manages the Application Firewall settings that are accessible in the Security Preferences pane on macOS devices.

The Administrator can enable the stealth mode by specifying a device that cannot be discovered by the ping command.

macOS 10.12+

Gold

macOS Restrictions

Determine which restrictions are enabled on macOS devices.

macOS

Gold

macOS AppStore Restrictions

Define which restrictions are enabled in macOS AppStore.

macOS

Gold

macOS Disk Burning Restrictions

Manage disk burning restrictions in macOS.

macOS

Gold

Mobile@Work for macOS

Create and distribute execution rules for Mobile@Work for macOS.

macOS

Gold

Mobile@Work for macOS Script

Create scripts to distribute to Mobile@Work for macOS.

macOS

Gold

Identity Preference

Identify an Identity Preference item in the user's keychain that references an identity payload included in the same profile.

macOS

Gold

Certificate Preference

Identify a Certificate preference item in the user's keychain that references a Certificate payload included in the same profile.

macOS

Gold

Allowed Media Control

Configure mounting, unmounting, and eject options for physical media.

macOS

Gold

macOS Finder Settings

Manage settings of Finder app in macOS.

macOS

Gold

macOS Kernel Extension Policy

Controls restrictions and settings for loading user-approved Kernel Extensions.

macOS

Gold

Active Directory (macOS)

Configure advanced options to bind macOS devices to an Active Directory (AD) domain in order to access software services that rely on AD for authentication and security.

macOS

Gold

Office 365 Auto Account Creation (macOS)

Configure user information and options to setup initial configuration for all Microsoft Office 365 applications.

macOS

Gold

Apple App Catalog

Manages access to the Apple App Catalog via a web clip.

  • iOS
  • macOS

Managed Domains

Specifies trusted email and web domains.

  • iOS 8+

Silver

Passcode

  • Makes a passcode mandatory.
  • Specifies passcode length and content.
  • Changes passcode requirements.
  • Android
  • iOS
  • macOS

Privacy Preference (macOS)

Configure which applications are allowed to gain access to system services, system files, and system resources.

macOS

Gold

Authenticate

Provide password-less authentication for cloud services and/or desktop logins.

  • macOS
  • Windows

Privacy Configuration

Specifies whether location data is collected.

  • iOS
  • Android
  • Windows

Client Privacy Statement Information

Display privacy policy to the user in Go client.

  • Android
  • Android enterprise
  • iOS

Client Privacy

Configure to collect data via MixPanel including device and usage information to troubleshoot and maintain the highest quality of services.

  • iOS
  • macOS

Software Updates

Creates and distributes rules for OS updates.

  • iOS
  • macOS
  • Windows

Time Server

Allow devices to connect to custom time servers.

macOS

Gold

Web Content Filter

Controls Safari content.

Supervised iOS 7

Silver

Windows Information Protection

Defines Windows Information Protection (WIP) settings to protect enterprise data.

Windows 10+

Gold

Windows Restrictions

Determines which features are available on Windows Phone devices.

Windows Phone

User Resources

Type What It Does For These Devices Needs This License
CalDAV
  • sets up access to a CalDAV server (like Google Calendar)
  • iOS
CardDAV
  • sets up access to a CardDAV server (like Google Contacts)
  • iOS
Email
  • sets up access for POP/IMAP email (like Gmail)
  • iOS
Exchange
  • sets up access for ActiveSync-based email  (like Outlook) for Android and iOS mobile devices
  • sets up Exchange Web Services (EWS)-based email for macOS devices
  • defines how much to sync to the device
  • defines security for email
  • Android
  • iOS
  • macOS

  • Exchange via sentry is not supported on macOS
  • The Sync Past days emails flag is not applicable for macOS

Google
  • Creates Google account configurations that connect iOS 9.3.2+ devices to Google accounts.
  • Specifies which app to use to make calls to contacts in the Google system.
  • iOS
Font
  • installs non-standard fonts necessary for proper display of documents
  • iOS
Subscribed Calendar
  • sets up a subscription to an internet calendar
  • iOS

Web Clip

  • displays a shortcut (icon) to a web page
  • iOS
  • macOS
Content Caching
  • provides content-caching service in order to enable local copies of the App Store software and
  • enables connected clients for faster software and app downloads.
  • macOS

Enterprise Network Access

Type What It Does For These Devices Needs This License
AirPlay
  • sets up access to alternate devices for media display
  • iOS
  • macOS
Silver
AirPrint
  • sets up wireless printing
  • iOS
  • macOS
Silver
Always On VPN
  • sets up access to a VPN server without user interaction
  • Android 7.0 +
  • iOS 8+
  • Gold for Android enterprise
  • Silver for iOS

Default App Runtime Permissions

  • sets the runtime permission configuration for apps deployed to Android enterprise devices.
  • Apps built targeting Android API 23+ and running Android 6.0+ on Android enterprise devices.
Education
  • configures the Apple Education payload and the Classroom app for Leaders and Members
  • supervised iOS 9.3+
Gold
Global Proxy
  • sets up devices to forward HTTP traffic to a proxy server
  • supervised iOS 7
Silver
LDAP
  • sets up access to a corporate directory
  • iOS
Tunnel
  • defines a per-app VPN connection between a client and Sentry using Tunnel
  • iOS 7+
  • Windows 10+

Bridge

  • allows IT to modernize Windows operations on UEM without giving up critical functionality
  • Windows 10+ desktop
Bridge license
macOS Server
  • define a macOS Server account with the configured account types and relevant settings. Allows the user to activate File Sharing on the server.
  • iOS 10+
Per-app VPN
  • sets up connections between specific apps and a VPN server
  • iOS

Silver

Single Sign-On
  • sets up single sign-on for specified managed apps
  • iOS
Multi-user Secure Sign-in
  • sets up secure multi-user login via web clip
  • iOS
VPN
  • sets up access to a VPN server
  • Android
  • Windows
  • iOS
  • macOS
VPN On Demand
  • sets up access to a VPN server based on domains, host names, etc.
  • iOS

Wi-Fi

  • sets up access to a wireless network
  • Android
  • Windows
  • iOS
  • macOS

Cellular Network

Type What It Does For These Devices Needs This License
APN
  • sets up the cellular Access Point Name for the device
  • iOS
Cellular
  • sets up cellular network access
  • iOS
iOS Telecom Presets Configuration
  • sets default values for roaming restrictions
  • sets default values for personal hotspot restrictions
  • iOS

More Configurations

Type What It Does For These Devices Needs This License
Apple TV
  • defines language and locale for Apple TV
  • supervised iOS 7
Silver
Default Device Name
  • defines a default device name using variables
  • supervised iOS 8
Silver
iOS Wallpaper
  • installs a home screen and lock screen background
  • supervised iOS 7
Silver
macOS Wallpaper
  • Installs a home screen and lock screen wallpaper on the devices. Wallpapers can be changed by the user but not removed from a device once distributed
Not required
Single App Mode
  • restricts the device to use of the specified app
  • supervised iOS 7
Silver

Associated Domains Configuration

  • The Associated Domains configuration is a dictionary that maps apps to their associated domains.
  • Associated domains can be used with features such as Extensible AppSSO, universal links, and Password AutoFill.

macOS 10.15+

Gold

Device Sync Configuration

Device Sync settings provide a list data points you can monitor on devices. Device Sync configurations cannot be edited. To view a list of the settings checked:

Procedure

  1. Go to Configurations.
  2. Click Device Sync Config.The Details tab of the Device Sync Config page is displayed with a list of items checked.
Settings Time between readings in minutes
Certificate List
Device Information 60
Installed App List 60
Managed App List 60
Profile List 60
Provisioning Profile List 60
Restrictions 60
Security Information 60
iOS 9+
Check for Updates 1440

Related topics