Create a Device Level Windows Bluetooth Policy

You can configure Bluetooth restrictions for your Windows devices using this policy. The device must be enrolled in JumpCloud MDM. This policy works on devices running Windows 10/11.

Note:

This is a device level policy that applies system-wide to the device and all of its users. You can bind this policy to individual devices or device groups. For policies that apply to a specific user's profile across devices, see Get Started: Policies and Learn More section of this article.

Creating the Policy

To create a Bluetooth Configuration policy for Windows devices, do the following:

Selecting the Policy Template

  1. Log in to the JumpCloud Admin portal.

Important:

If your data is stored outside of the US, check which login URL you should be using depending on your region. If your organization uses LDAP, RADIUS, or requires firewall allow list configuration, the Fully Qualified Domain Names (FQDNs) will also be region specific. See JumpCloud Data Centers for the URLs, FQDNs, and IP addresses.

  1. Go to Device Management > Policy Management. The Policy Management page is displayed.
  2. On the Policy Management page, click +Add New.
  3. Select Device Policy to assign the policy to devices and device groups. On the New Device Policy page:
    • Select the Windows tab.
    • Search and select the policy name and click Configure. The Details tab of the policy is displayed.
    • On the Details tab, configure the required policy configuration settings.
    • (Optional) In the Policy Name field, enter a new name for the policy or keep the default. Policy names must be unique.
    • (Optional) In the Policy Notes field, enter details such as creation date of the policy, and information on testing and deployment of the policy.

Configuring the Policy

  • In the Settings field, select the settings you want enabled for this policy.

Note:

The following available bluetooth settings are enabled by default:

  • Allow Bluetooth Advertising
  • Allow Discovery Mode
  • Allow Prepairing
  • Hands Free Profile
  • Audio Headsets (Voice)
  • Audio Headsets & Speakers (Voice and Music)
  • Classic Keyboards and Mice
  • LE Keyboards and Mice

The File Transfer option is disabled by default. Select the checkbox to enable file transfer.

Applying the Policy

  • (Optional) Select the Policy Groups tab. Select one or more policy groups where you want to add this policy. 
  • Select the Device Groups tab. Select one or more device groups where you want to apply this policy to. For device groups with multiple OS member types, the policy only applies when a user logs into a supported Windows device that is enrolled in MDM.
  • Or, select the Devices tab. Select one or more devices where you want to apply this policy.
  • Click Create Policy. A success message is displayed indicating the completion of policy creation.

Note:

You must select either a device or device group to create and apply this policy.

Viewing Policy Status

  1. Select the Status tab.
  2. To see the last Result Log for a device where this policy is applied, click view.

Note:
  • If any errors occur, they're listed in Exit Status. If you have an Exit Status of 0, no errors occurred when applying or enforcing this policy.

Important:

After this policy is applied to a Windows device, the Bluetooth & devices section of the System Settings will display that Bluetooth is successfully turned off, even though the toggle is still marked as On.

Creating Valid Service Universally Unique Identifiers (UUID)

To create a valid service UUID:

  1. Find the service id from the Bluetooth standards documentation.
  2. The UUIDs all use the same base UUID with the profile identifiers added to the beginning of the base UUID.

For example, let's create a UUID for Hands Free Profile.

  • Hands Free Profile service id - 0x111E
  • Base UUID - 0x00000000-0000-1000-8000-00805F9B34FB
  • Hands Free Profile UUID = 0x111E added to the beginning of base UUID = 0000111E-0000-1000-8000-00805F9B34FB
  • Always ensure the UUID is enclosed in curly braces {} and ends with a semicolon ;
  • The valid Hands Free Profile UUID to be entered is - {0000111E-0000-1000-8000-00805F9B34FB};

See Microsoft's support documentation for ServicesAllowedList usage guide to learn more.

Back to Top

Still Have Questions?

If you cannot find an answer to your question in our FAQ, you can always contact us.

Submit a Case