- \n
- See\u00a0Get Started: Policies<\/a>\u00a0before you get started with policies.<\/li>\n\n\n\n
- To assign a policy to a device, you must have an active device running on a supported OS. <\/li>\n\n\n\n
- To assign a policy to a device group, you must have defined device groups. See Get Started: Groups<\/a><\/li>\n<\/ul>\n\n\n\n
Considerations<\/strong>:<\/p>\n\n\n\n
- \n
- If the JumpCloud Agent for a device is out-of-date, JumpCloud may be prevented from enforcing all policies\u00a0on that device.<\/li>\n\n\n\n
- For Windows devices, only English (United States) has been qualified. Additional language packs are not currently supported.<\/li>\n\n\n\n
- Windows Home is\u00a0not\u00a0supported.<\/li>\n\n\n\n
- There are no guardrails preventing the creation of multiple policies with conflicting policy behaviors. Use caution when applying similar policies to devices to avoid unintended device behavior.<\/li>\n<\/ul>\n\n\n\n
Creating a Policy<\/h2>\n\n\n\n
You can set up policies to enforce specific behavior on the devices you manage. All JumpCloud policies can be renamed if you have specific conventions or want to include a category for the devices.<\/p>\n\n\n\n
Some policies require you to take an additional step after creating the policy and applying it before the policy is active on a device. This action is listed in Policy Activation and should be the final step in the procedure.<\/p>\n\n\n\n
To create a policy:<\/strong><\/p>\n\n\n\n
- \n
- Log in to the JumpCloud Admin Portal<\/a>.<\/li>\n\n\n\n
- Go to DEVICE MANAGEMENT <\/strong>> Policy Management<\/strong>.<\/li>\n\n\n\n
- In the All<\/strong> tab, click (+).<\/strong><\/li>\n\n\n\n
- On the New Policy panel, select a tab for the desired OS.<\/li>\n\n\n\n
- Select a policy from the list, then click configure<\/strong>.
![\"\"](\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/06\/policy-mgmt-new.png\")
<\/li>\n\n\n\n- Review the customized information on the left side about the policy and which OS versions are required to run the policy:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
- \n
- Minimum Supported Version<\/strong> – This policy must be run on a device with this minimum supported OS version. <\/li>\n\n\n\n
- Deprecated Versions<\/strong> – This policy cannot run on a device with this OS version or later. <\/li>\n\n\n\n
- Supported Enrollment Types<\/strong> –\n
- \n
- User-Enrolled Devices <\/strong>– These iOS or iPadOS devices are owned by the user and enrolled by the user.<\/li>\n\n\n\n
- Device-Enrolled Devices<\/strong> – These iOS or iPad devices are owned by the corporation and enrolled by the IT Admin or the user.<\/li>\n\n\n\n
- Auto-Enrolled Devices<\/strong> – These devices are owned and enrolled by the corporation through Apple\u2019s Automatic Device Enrollment. This option is not currently supported.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n
- \n
- If there is no Minimum Supported Version or Deprecated Versions, these fields are not visible. If there is no Enrollment Type visible, then all enrollment types are supported for this policy.
![\"\"](\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/04\/GenericiOSPolicyAllowActivation-1.png\")
<\/li>\n<\/ul>\n<\/li>\n\n\n\n - (Optional) In the Policy Name<\/strong> field, enter a new name for the policy or keep the default. Policy names must be unique.<\/li>\n\n\n\n
- (Optional) In the Policy Notes<\/strong> field, enter information you want to retain such as testing notes, config details, admin responsible for configuring, historical information, and intended use. <\/li>\n\n\n\n
- If needed, use these instructions to configure the appropriate items in the Settings<\/strong> section (not all policies have configurable fields in the Settings section: \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
- \n
- Configure Settings for iOS and iPadOS Policies<\/a><\/li>\n\n\n\n
- Configure Settings for MacOS Policies<\/a><\/li>\n<\/ul>\n\n\n\n
- \n
- Configure Settings for Windows Policies<\/a><\/li>\n\n\n\n
- Configure Settings for Android Policies<\/a><\/li>\n<\/ul>\n<\/li>\n\n\n\n
- (Optional) Select the Device Groups<\/strong> tab. Select one or more device groups where you’ll apply this policy. For device groups with multiple OS member types, the policy is applied only to the supported OS.<\/li>\n\n\n\n
- (Optional) Select the Devices<\/strong> tab. Select one or more devices where you’ll apply this policy.<\/li>\n\n\n\n
- If applicable, select the Details <\/strong>tab and read the Policy Activation section to determine if there are any additional steps you need to take after saving the policy before it takes effect.<\/li>\n\n\n\n
- Click save<\/strong>.<\/li>\n\n\n\n
- If prompted, click save<\/strong> again to see the policy appear in the Policy List.<\/li>\n\n\n\n
- \u200b(Optional) Complete any additional steps listed in Policy Activation. <\/li>\n\n\n\n
- After you save, the policy takes effect on active devices in the selected groups in near real-time, but could take up to a few minutes in some instances. The policy is enforced on any inactive devices the next time they next become active. After the policy is created, you can apply it to additional groups and devices in the following ways:\n
- \n
- Select the policy and select Device Groups<\/strong>.<\/li>\n\n\n\n
- Select the device group and select Policies<\/strong>.<\/li>\n\n\n\n
- Select the policy and select Devices<\/strong>.<\/li>\n\n\n\n
- Select the device and select Policies<\/strong>.<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n\n\n\n
After a policy is created and saved, it may take a few minutes for the policy to be enforced on the device. When the policy is running, you can view its status to determine if the policy was successfully applied or if it requires additional steps.<\/p>\n\n\n\n
- Select the device group and select Policies<\/strong>.<\/li>\n\n\n\n
- Configure Settings for Android Policies<\/a><\/li>\n<\/ul>\n<\/li>\n\n\n\n
- Configure Settings for MacOS Policies<\/a><\/li>\n<\/ul>\n\n\n\n
- (Optional) In the Policy Notes<\/strong> field, enter information you want to retain such as testing notes, config details, admin responsible for configuring, historical information, and intended use. <\/li>\n\n\n\n
- Device-Enrolled Devices<\/strong> – These iOS or iPad devices are owned by the corporation and enrolled by the IT Admin or the user.<\/li>\n\n\n\n
- Deprecated Versions<\/strong> – This policy cannot run on a device with this OS version or later. <\/li>\n\n\n\n
- Go to DEVICE MANAGEMENT <\/strong>> Policy Management<\/strong>.<\/li>\n\n\n\n
- Log in to the JumpCloud Admin Portal<\/a>.<\/li>\n\n\n\n
![\"\"](\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/03\/policy-status-MDM-enrollment.png\")
<\/li>\n\n\n\n![](\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/tip-icon.png\"){kind=icon}
<\/p><\/div>![](\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/warning-icon.png\"){kind=icon}
<\/p><\/div>![\"\"](\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/06\/assign-policy-group-to-device-group.png\")
<\/li>\n\n\n\n![\"\"](\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/06\/delete-policy-groups-confirmation.png\")
<\/li>\n<\/ol>\n","protected":false},"excerpt":{"rendered":"