Policy Management

Policy management gives administrators a unified means of targeting devices with specific configurations—including Wi-Fi, VPN, apps, labels, passcodes, and profiles. Administrators can create, manage, and link policies in KACE Cloud MDM, as well as access compliance information for users and devices. KACE Cloud MDM actively monitors and enforces each device configuration. The policies feature also provides status monitoring of unsent changes during deployment and maintains a history of all changes after deployment.


Policy Management Workflow

On the All Policies page, an admin can add new policies, reorder the list of existing policies, and open each individual policy row to view individual policy details.

IMPORTANT: A policy can be applied to all devices regardless of operating system. KACE Cloud MDM will automatically apply the elements of the policy that are valid for each OS.

On the Individual Policy page, an admin can add/edit configurations as well as activate/deactivate, rename, add notes, view unsent changes, and change history.

Default Policy

The default policy is the baseline created by the system and will always be applied first to all users and devices. Policies that are added subsequently will take precedence over the default policy in the event of a conflict.

When first setting up policy management in KACE Cloud MDM, the default policy will be pre-populated with all library configurations that were previously marked for auto deploy on enrollmentThe auto deploy checkbox has been functionally replaced by the Default Policy feature. With the release of the Policy Management GA, rules and restrictions are automatically deployed to all devices and users. These settings may be altered by editing the default policy or by creating and applying additional policies.. An admin can edit any of the policy settings, however, the ordering of the default policy in the policy list cannot be changed.

Labels and Policies

Labels are the key component for linking policies with users and devices. To link a group of users and/or devices with a policy, an admin can:

Link a Policy to an Existing Label

From an individual policy page:

  1. In left-hand navigation, select Applies To.
  2. Select a label from the list.
  3. Click the Link to Policy button.

Link a New Label to a Policy:

From the labels library:

  • Add, configure, and save the new label.

From an individual policy page:

  1. Click the Link Labels... button in the Applies To section.
  2. Select a label from the list.

  3. Click the Link to Policy button.


Standard Functions

Add New Policy

To add a new policy:

  1. Go to Policies in top navigation.
  2. Click Add New.
    • Rename policy at top of page.
    • Set and link labels, configurations, options and/or profiles.
  3. Click Activate and Push Changes.

Caution: Changing a policy status from Inactive to Active does not push the change to the device(s). For a new policy, an admin can click Activate and Push Changes to accomplish both tasks. If an admin prefers to only Activate a policy but not push, using the toggle option is best.

Edit Existing Policy

To edit an existing policy:

  1. Go to Policies in top navigation.
  2. Click an individual policy to open it, then click the Edit icon.

Note: Edits to an existing policy will be applied automatically to all devices linked to the policy.

Deactivate a Policy

  1. Go to Policies in top navigation.
  2. Click an individual policy to open it, then click the Edit icon.
  3. Set the toggle from the Active state to the Inactivate state.
  4. Confirm this action by clicking Deactivate Policy.

Note: An Inactive policy is identifiable as (inactive) in the policy list. You also have the option to completely Delete the policy from your policy list. To do this, click the Delete button under the Active/Inactive toggle.

Link/Unlink Configurations

  1. Go to Policies in top navigation.
  2. Click an individual policy to open it, then click the Edit icon.
  3. Choose the new configuration type in the left-hand navigation.
  4. Select an individual item, then click Link/Unlink.

Note: For passcode rules and restrictions, the Link/Unlink button is also a dropdown that allows for the selection of specific OS types, including Android Device-wide, Android Work Profile, and iOS.

Note: When linking a New Configuration to an Existing Policy, if changes are not immediately pushed, the unsent change will exist in the Unsent Changes list and can be pushed from that location.

Link/Unlink Passcode

To link or unlink a passcode:

  1. Go to Policies in top navigation.
  2. Click an individual policy to open it, then click the Edit icon.
  3. Choose Passcode Rules in left panel.
  4. Click the Link/Unlink dropdown in the right panel.
  5. Choose the appropriate device set-up for your policy.

Once linked, the device type will appear confirmed in the Linked column.

Push Unsent Changes

  1. Go to Policies in top navigation.
  2. Click an individual policy to open it, then click the Edit icon.
  3. Select one or more unsent changes in list, then click Push Changes.
  4. Click Confirm.

Remove Unsent Changes

  1. Go to Policies in top navigation.
  2. Click an individual policy to open it, then click the Edit icon.
  3. Select one or more unsent changes in list, then click Remove Unsent Changes.

Reorder Policies

To reorder the list of policies:

  1. Go to Policies in top navigation.
  2. Click Reorder at the top right of the page.
  3. Once in reorder mode, you can click and drag to reorder your policies.
  4. Click Confirm New Order.

IMPORTANT: The default policy is the baseline policy created by the system and it cannot be reordered. Policies that are added subsequently will take precedence over the default policy in the event of a conflict.

View Change History

To view change history:

  1. Go to Policies in top navigation.
  2. Click an individual policy to open it, then click the Edit icon.

Change History is located on individual policy pages:

View Unsent Changes

To view unsent changes:

  1. Go to Policies in top navigation.
  2. Click an individual policy to open it, then click the Edit icon.

Unsent Changes are located on individual policy pages: