In Mobile Manager, devices are controlled through the use of policies. With policies, you can
- Manage passcode behavior
- Set device restrictions such as use of cameras, access to the App Store
- Prevent Wallpapers being modified
- Lock a device to a specific app
- Manage mail and calendars
- Create web shortcuts and push them to devices for easy access to websites
And much more.
Policies and Timed Policies
Mobile Manager offers persistent Policies and Timed Policies.
Policies can be found at Home, School or Group > Device Management > Policies or Timed Policies:
Use Policies to configure persistent policies. For example, if you want to permanently disable the camera in a specific group, use a Policy.
If you want to start and end a policy at a specific time of day, this is when you would use Timed Policies. For example, if you want to lock devices to a single app for an exam, you can create a timed policy that will be in effect for an hour or whatever time you specify. You can also create timed policies that can last for as many days as you want, which can be useful for extended periods like spring break.
Note: Timed policies are restricted to Passcode, Restrictions, Web Clips, App Lock, APN/Cellular, System Rule, and System Control policies and vary by device type or operating system.
Further details on how to setup Timed Policies can be found here:
How do I apply a Policy?
Navigate to the level where you would like to apply a policy and select the policy type you want to configure. For example, if you want to disable the camera you'll need to create a restriction policy, click Restrictions.
To prevent the use of the camera, toggle the switch to the OFF position (grey):
The switches default position corresponds to how that feature comes on the device when it is not configured (out the box).
For example, the camera is allowed on iOS devices by default so the switch starts in the ON (green) position.
Once you have toggled the features you wish to allow or disable, scroll to the bottom of the page and press the Save button:
Reset will undo any changes and revert back to the last saved configuration.
On Campus and Global Policies
Policies and Timed Policies can be configured either as Global or On Campus (only when users are on your schools network):
By default, Policies and Timed Policies are Global and apply whether you are on the schools network or not.
On Campus policies are great for a BYOD program, where you want to manage policies on a student-owned device when they’re in school, but not when they’re at home. They’re also useful for generally loosening policies after school hours and on weekends.
Note: You will need to configure the Network settings in Mobile Manager for On Campus policies to apply. For more information please see:
You can tell what's configured within the policy inheritance column.
When there is a blue dot with a white X, it means this settings is applied in the current level:
If the policy is configured and inherited from a level above there will be a blue dot:
Clicking the blue dot will show the inheritance modal:
We can see in our example 'Allow use of camera' has been disabled in the Lightspeed Europe level.
You'll be able to click on the group and navigate to that level, if you have admin rights to that level.
We show inherited policies within payloads too.
In our example, we have one app blocked using the App Permission payload at the current level, but there are also two others listed in the Inherited Policies section.
These can be collapsed or expanded, press the arrow:
Can I lock policies?
Yes, you can lock policies so they cannot be changed by admins further down the hierarchy.
There is an open padlock icon next to the switch, when pressed it turns orange and displays the lock icon:
Scroll down and press Save after making changes.
When a policy is locked, admins further down will not be able to change that policy, there is a padlock displayed in the inheritance column:
Pressing the padlock will show where the policy has been locked from.
If you need to modify a feature and it’s locked, please contact your Mobile Manager administrator for help.
How do I check what policies are on a device?
Click on a Device > Restrictions
This will show all the restrictions currently in place on the device.
Click on a Device > Profiles
This shows all the profiles that are present on the device, within the Profile Names column will be a good indicator of what's been applied.
Our Group Profile in the example above shows there are Certificates, Fonts, Restrictions and Web Clips applied. Self Service Portal (SSP) is also present, and the device is configured for Apple Classroom.
Note: Devices update their information with us randomly throughout the day or after providing feedback from a command.
To ensure you are looking at the devices current information, click on Device > Options > Update Information. Wait a few seconds for the command to reach the device and for the device to provide feedback to us.
Navigate back over to the devices General tab, scroll down and you'll find Last Info Update and Last Check-in times. Make sure the Last Info Update time is current, then you know the device information you are looking at in Mobile Manager is current.
How do I see what policies the device should have?
The Restrictions and Profile tabs are good indicators to see what policies are currently on the device, but to check what policies are actually being inherited via the hierarchy and where they are coming from, use the Policy Search tab.
Click on a Device > Policy Search.
Filter the dropdown to select what you are interested in (Restrictions in this case) and press the 'Search' button. We will then show you all the inherited restrictions and groups where the device (or assigned user) is inheriting those restrictions from.
Tips and tricks:
You can filter by iOS type, and something else that comes in really handy is to only see what's been configured in a specific group, use the Filter By drop-menu that's at the top of every payload:
Search for a policy
Right next to the Filter By drop-menu, there is a search box. If you know the policy you are trying to find, type a keyword in here to filter the payload, in our example we searched for 'airplay':
When something is configured inside a payload at the current level, we will indicate how many. In our example there are two configurations inside the App Permissions payload:
Delete a payload
Press the X in the top right corner of any payload to delete it from the current level:
Note: This cannot be undone, any of the policies configured in this payload will be lost. A confirmation modal will appear to make sure this is the right action.
It will remove those settings from devices at this level and below.
Any policies inherited from levels above the current group will still be enforced.