Device Rules
What are Device Rules? While Server Rules determine what information is synchronized from the server to the device, Device Rules determine what information is synchronized from device to the server.
How are Device Rules assigned to a user account? A set of device policy rules is assigned to a user’s account by the policy set associated with the user class to which the user belongs. If a user is unclassified, the Default IT Policy set determines the user’s policy rule settings.
The Default IT Policy Set is automatically applied to all unclassified users when their accounts are added to the NotifyLink server. The Default IT Policy set of rules can be edited, but not deleted.
Policy Exceptions can be made for an individual user by editing the rules at the user level (User Administration > User IT Policy). Exceptions can also be made by the user from the device, provided the policy rule has not been locked.
The NotifyLink Device Client software allows users to customize (make exceptions to) the device policy rules through the Preferences menu on their device. Rule settings changed on the device will overwrite rule settings on the server. If a policy rule has been locked by the administrator, however, the user will not have the ability to change it from his/her device.
Locking Policy Rules. IT administrators can lock the device policy rules so that users cannot change them on the device. This enables the administrator to enforce corporate policies.
ActiveSync Device Rules. Rules for ActiveSync devices are configured separately from those configured for devices operating with the NotifyLink device client. See ActiveSync Rules. For a summary of policies supported for ActiveSync devices, see the Device IT Policy Comparison chart.
Device Rules allow you to:
|
Enforce or disable security policies on ActiveSync devices. |
|
|
Configure settings for how and when email is deleted from user devices. |
|
|
Define how devices will process email in the device Inbox. |
|
|
Enable/disable emergency calling for devices and set police, fire, ambulance and other emergency call phone numbers. |
|
|
Synchronize a list of the files stored on the device to the server on a daily, weekly, or monthly basis. |
|
|
Enable/disable data-at-rest encryption for data stored in the device database containing all NotifyLink email data and on the device storage disk. |
|
|
Set the policies for the device security lock parameters. |
|
|
Define the security password that unlocks a device. |
|
|
Define which type(s) of PIM items (calendar, contacts, tasks) to synchronize to the server. |
|
|
Define the type of synchronization for devices and how often devices synchronize with the NotifyLink server. |
Location: Select IT Policy Management from the
Administrative Web Home page.
|
|
Highlight the “Default” policy set (or a custom policy set you have created) and click Edit IT Policy.
|
|
Navigating the IT Policy List: Expand an individual group to reveal a list of the rules configurable in that group. (See Cleanup Rules in the illustration.) Click on an individual group title to edit the rule settings.
|
|
Policy Synchronization is a way to update all users assigned to a particular set of policy rules, with the policy’s current rule settings.
If the Automatic Push option is checked, any change made to the policy set is immediately synchronized to unclassified users. If Automatic Push is not used, the administrator may click the Synchronize All Unclassified Users button to synchronize changes.
Any policy synchronization, whether automatic or manual, will overwrite policy exceptions with the current settings of the policy rules. The administrator has the ability to view a list of users that have policy exceptions before synchronizing.
ActiveSync Rules