Device policies control mobile device access to your network and data resources. Device policies also control the degree to which you can manage a device's behavior. Device policy changes are applied to all devices associated with the policy, even when the policy change isn't applicable to all of the devices in the group. The Work Hub that's installed on enrolled devices enforces the device policies.
You can define the default values that appear when you create a new device policy on the Settings > Device Management page. You can create a new device profile when you configure your policy. Or if you've already created device profiles, you can select the existing profile as you create your device policy.
In the Mobility Manager left pane, click Policies and rules > Device policies and at the top of the right pane, click New Device Policy.
Type a name and description for the policy.
Under Targeted devices in the Groups box, select the group to apply to your device policy. Click the Filters drop-down list to specify whether the policy applies to corporately-owned devices, personally-owned devices, or both.See Assigning Targets and Filters to device policies.
Specify General settings.
Additional information about general settings is as follows:
Specify whether you want to enable MDM by device operating system.
The compliance rule must already be configured to select it from the drop-down menu.
Important: Devices using an email proxy require a device policy that specifies a compliance rule.
When you set the option Devices are checked for required app compliance every [n] hours to 0, upon the initial device enrollment of either an iOS or Android device, Mobility Suite pushes down required apps. Thereafter, however, as long as the value remains 0, required apps cannot be pushed down to enrolled devices.