Skip to content

Get started with device policies

The Policies startup assistant helps you create basic device policies for all platforms. You can enhance the policies later.


These instructions don’t apply to Chrome devices.

To create policies with the Policies startup assistant:

  1. On the dashboard, click Policies startup wizard in the Getting started tasks widget.


    If you don’t see the widget, click Add widget > Getting started.

  2. On the Platforms page, select the device platforms for which you want to create a policy.

    Select Android and iOS & iPadOS.

  3. For Android, you can select a management mode.

    This setting affects which policy types are available. We recommend you use the Android Enterprise mode.

  4. On the Policies page, configure the following settings:

    1. Enter a name for the policy.

      For each platform, a policy with this name is created.

    2. Select the areas the policy manages.

      If you clear a check box, the corresponding step of the assistant is skipped. You can configure the skipped areas (and more) later.

      We suggest you select at least Password requirements and Restrictions.

  5. On the Passwords page, configure requirements for the device password.

  6. On the Restrictions page, configure restrictions applied to devices, like turning off the camera or other device features that could be a security risk.
  7. On the Wi-Fi page, configure the connection to your corporate Wi-Fi network.

    If your Wi-Fi network uses a different security type than WPA/WPA2 PSK, you can change that setting later.

  8. On the Email page, configure the connection to Exchange Online or an on-premise Exchange Server installation.

    The placeholders %_USERNAME_% and %_EMAILADDRESS_% are replaced by the name and the email address of the user assigned to the device.

  9. Click Finish.

For each platform you’ve selected, the assistant creates a policy.

To view the policy, click Policies on the menu sidebar and then click the device platform.

To change the areas managed, click the policy’s name and then click Add configuration.

You must set up Android Enterprise for your organization before you can enroll devices. See Set up Android Enterprise - Overview.