Managing devices with IT policies

You can use IT policies to manage the security and behavior of devices in your organization. An IT policy is a set of rules that control features and functionality on devices. You can configure rules for 

BlackBerry 10

, 

iOS

, 

macOS

, 

Android

, and 

Windows

 devices in the same IT policy. The device OS determines the list of features that can be controlled using IT policies and the device activation type determines which rules in an IT policy apply to a specific device. Devices ignore rules in an IT policy that to not apply to them.

BlackBerry UEM

 includes a Default IT policy with preconfigured rules for each device type. If no IT policy is assigned to a user account, a user group that a user belongs to, or a device group that a user's devices belong to, 

BlackBerry UEM

 sends the Default IT policy to a user's devices. 

BlackBerry UEM

 automatically sends an IT policy to a device when a user activates it, when you update an assigned IT policy, or when a different IT policy is assigned to a user account or device.

BlackBerry UEM

 on-premises synchronizes daily with the 

BlackBerry Infrastructure

 over port 3101 to determine whether any updated IT policy information is available. In If updated IT policy information is available, 

BlackBerry UEM

 retrieves it and, by default, stores the updates in the 

BlackBerry UEM

 database. Administrators with the "View IT policies" and "Create and edit IT policies" permissions are notified about the update when they log in. If your organization's security policy does not allow automatic updates, you can turn off the automatic updates and import updates into 

BlackBerry UEM

 manually. for more information, see Importing IT policy and device metadata updates.

Updated IT policy information is updated automatically in 

UEM Cloud

 instances.

For more information about the IT policy rules for each device type, download the Policy Reference Spreadsheet.