Default Policy Settings ZENworks Mobile Management 2.7.x

Transcription

1 Default Policy Settings ZENworks Mobile Management 2.7.x August 2013

2 Legal Notices Novell, Inc., makes no representations or warranties with respect to the contents or use of this documentation, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc., reserves the right to revise this publication and to make changes to its content, at any time, without obligation to notify any person or entity of such revisions or changes. Further, Novell, Inc., makes no representations or warranties with respect to any software, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc., reserves the right to make changes to any and all parts of Novell software, at any time, without any obligation to notify any person or entity of such changes. Any products or technical information provided under this Agreement may be subject to U.S. export controls and the trade laws of other countries. You agree to comply with all export control regulations and to obtain any required licenses or classification to export, re-export or import deliverables. You agree not to export or re-export to entities on the current U.S. export exclusion lists or to any embargoed or terrorist countries as specified in the U.S. export laws. You agree to not use deliverables for prohibited nuclear, missile, or chemical biological weaponry end uses. See the Novell International Trade Services Web page ( for more information on exporting Novell software. Novell assumes no responsibility for your failure to obtain any necessary export approvals. Copyright Novell, Inc. All rights reserved. No part of this publication may be reproduced, photocopied, stored on a retrieval system, or transmitted without the express written consent of the publisher. Novell, Inc South Novell Place Provo, UT U.S.A. Online Documentation: To access the latest online documentation for this and other Novell products, see the Novell Documentation Web page ( Novell Trademarks For Novell trademarks, see the Novell Trademark and Service Mark list ( tmlist.html). Third-Party Materials All third-party trademarks are the property of their respective owners.

3 Default Policy Settings This chart documents the default settings of the entire ZENworks Mobile Management policy suite for each security level available in the Create New Policy Suite Wizard. It can also be used as a template for planning any customizations to your policy suites. Print two charts - one for planning a policy suite for corporate liable devices and one for planning a policy suite for individual liable devices. Select a security level to start with and then mark the rules you want to customize. Policy Low Level Moderate Level Strict Level High Level Audit Tracking: General Archive files on device Send file list frequency (in days) Record phone log Record text message log Record application data usage Audit Tracking: Location tracking Record location of device GPS location accuracy X 1 X 1 X 3 X 5 ZENworks Mobile Management 2.7.x Default Policy Settings Default Policy Settings 3

4 Device Control: Device Features Allow Bluetooth Allow browser Allow camera Policy Low Level Moderate Level Strict Level High Level Allowed Allowed Handsfree only Disabled Allow infrared Allow Internet sharing from the device Allow remote desktop Allow SD card Allow synchronization from a desktop Allow text messaging Allow Wi-Fi Device Control: Allow HTML formatted Maximum HTML body truncation size (in KB) No Max No Max No Max No Max Allow consumer Allow POP/IMAP Maximum plain text body truncation size (in KB) No Max No Max No Max No Max Device Control: ActiveSync Synchronization Maximum calendar age for synchronization Maximum age for synchronization (1 month) (1 month) (1 month) (1 month) (1 month) (1 month) (2 weeks) (1 week) Require manual sync when roaming Device Control: Multiple Devices Allow multiple devices File Share Permissions ZENworks Mobile Management 2.7.x Default Policy Settings Default Policy Settings 4

5 ios Devices: Device Features Allow FaceTime (prerequisite: Allow Camera) Allow voice dialing (prerequisite: Require Password) Allow screen shot Allow explicit content Allow automatic sync when roaming Allow Siri Allow Siri profanity filter (prerequisite: Allow Siri) Allow Siri while device locked Allow Game Center Allow multiplayer gaming Allow adding Game Center friends Force itunes Store Password Entry Force encrypted backup Allow Passbook while device locked ios Devices: Applications Allow application installation Allow Bookstore Allow Bookstore erotica (prerequisite: Allow Bookstore) Allow in-app purchases Allow YouTube Allow itunes ios Devices: Safari Browser Allow Safari (prerequisite: Allow Browser) ZENworks Mobile Management 2.7.x Default Policy Settings Default Policy Settings 5

6 Accept cookies Always Always From visited sites Never Allow auto-fill Allow JavaScript Block pop-ups Force fraud warning ios Devices: Ratings Rating region US US US US Application ratings Allow All Apps Movie ratings Allow All Movies PG-13 Don t Allow Movies Don t Allow Movies TV show ratings ios Devices: Security Allow All TV Shows ZENworks Mobile Management 2.7.x Default Policy Settings Default Policy Settings 6 TV-14 Don t Allow TV Shows Don t Allow TV Shows Allow Profile Removal Always Always Always Always Profile Removal Password Blank Blank Blank Blank Allow Untrusted TLS Prompt Allow Diagnostic Submission Text ios Devices: icloud Allow icloud backup Allow document sync Allow Photo Stream Allow Shared Photo Streams ios Devices: ios MDM Record installed applications Managed Mobile Apps Apply Managed Settings

7 Allow Voice Roaming Allow Data Roaming ios Devices: Supervised Mode Allow App Removal Allow Configuration Profile Installation Allow imessage Global HTTP Proxy Payload X Blank X Blank X Blank X Blank Single App Mode X Blank X Blank X Blank X Blank Mobile Apps Permissions Resource Control Allow ActiveSync Allow File Share Allow Mobile Apps Allow NotifySCM Restricted Apps Permissions Blacklists Whitelists Security Settings: Password Require password Enable password recovery ZENworks Mobile Management 2.7.x Default Policy Settings Default Policy Settings 7

8 Allow simple password Require minimum password length Minimum password length Require complex password Require alphanumeric password Minimum number of complex characters 1 if enabled Require alphabetic password Require numeric password Require biometric password Require device password expiration Password expiration in days 30 if enabled Require device password history Number of stored passwords 1 if enabled Enable password echo Begin password echo after attempts 5 if enabled 5 if enabled 5 if enabled 5 if enabled Security Settings: Encryption Require encryption on the device Require encryption on the SD card Security Settings: Device Inactivity and Locking Require max inactivity time device lock Max inactivity timeout (in minutes) 60 if enabled Require device challenge timeout Max device challenge timeout 120 if enabled Enable customizable lock message Customizable lock message Blank Blank Blank Blank ZENworks Mobile Management 2.7.x Default Policy Settings Default Policy Settings 8

9 Audible alert on lock Maximum grace period (in minutes) 5 minutes 1 minute 0 (immediately) 0 (immediately) Wipe device on failed number of unlock attempts Maximum number of unlock attempts 4 if enabled Security Settings: Emergency Calls Enable emergency calls when locked Allow dialing of any number Ambulance phone number Fire phone number Police phone number Other phone number SMIME Settings Require signed SMIME messages Require encrypted SMIME messages Require signed SMIME algorithm SHA1 SHA1 SHA1 SHA1 Require encryption SMIME algorithm TDES TDES TDES TDES Allow SMIME encryption algorithm negotiation Do not negotiate Do not negotiate Do not negotiate Allow SMIME soft certs Do not negotiate TouchDown: Installation Allow any server certificate Initiate enrollment Require TouchDown encryption ZENworks Mobile Management 2.7.x Default Policy Settings Default Policy Settings 9

10 Push TD enterprise license to device TouchDown: General Allow copy/paste in s Allow easy PIN recovery Allow speak notification option Show TouchDown PIN Show calendar info on notification bar Show info on notification bar Show task info on notification bar Disable Printing Forced SMIME Pin Timeout TouchDown: Signature Allow change signature on device Set signature (corporate / individual) via TouchDown via TouchDown via TouchDown via TouchDown TouchDown: Widgets Allow export to third-party widgets Allow TouchDown calendar widget Allow TouchDown widget Allow TouchDown task widget Allow TouchDown universal widget Show widget data when TouchDown is locked TouchDown: Phone Book Phone book fields to copy Assistant Phone All All All All ZENworks Mobile Management 2.7.x Default Policy Settings Default Policy Settings 10

11 Car Phone Computer Phone Department Home Address Home Fax Home Phone Home Phone 2 Location Mobile Phone Note Organization/Company Other Address Other Fax Pager Photo Radio Phone Title Work Address Policy Low Level Moderate Level Strict Level High Level Work Phone Work Phone 2 TouchDown: User Configurable Settings - Calendar Show All-day events in the Calendar Widget ZENworks Mobile Management 2.7.x Default Policy Settings Default Policy Settings 11

12 Show upcoming events only Enable meeting resource field Show calendar tasks in the Agenda Show overdue tasks in the Agenda Customize the start and end days for the week First day of a week to show in Calendar Monday Monday Monday Monday Last day of a week to show in Calendar Friday Friday Friday Friday Start time of the work day 8:00 8:00 8:00 8:00 End time of the work day 17:00 17:00 17:00 17:00 Default reminder for each new event 3 days 3 days 3 days 3 days Default privacy status for each new event Normal Normal Normal Normal Default availability status for each new event Busy Busy Busy Busy Calendar zoom size TouchDown: User Configurable Settings Device Control Show a compact PIN screen (NEW 7.1) Default theme (NEW 7.1) Basic Basic Basic Basic TouchDown: User Configurable Settings Enable selectors Show summary Highlight senders Enable search as you type Automatically download embedded images Enable move to any folder option Highlight unread messages ZENworks Mobile Management 2.7.x Default Policy Settings Default Policy Settings 12

13 Enable preview attachments option Always expand folders Enable confirm deletes prompt Enable confirm move prompt Toolbar mode Always show Always show Always show Always show After delete go to Next Next Next Next Enable alerts at non-peak times Confirm move to Junk prompt TouchDown: User Configurable Settings - Synchronization Enable push mode Off-peak polling interval TouchDown: Suppressions Suppression Configuration Custom Custom Custom Custom TouchDown: Suppressions - Calendar, Contacts, Tasks Allow appointment alert configuration Allow appointment reminders at non-peak times option Enable appointment reminders at nonpeak times Allow appointment synchronization options Allow category configuration Allow copy to phone format options Name format for contacts copied to phone Allow enable appointment reminders option Enable appointment reminders First MI Last First MI Last First MI Last First MI Last ZENworks Mobile Management 2.7.x Default Policy Settings Default Policy Settings 13

14 Allow include phone contacts in picklist option Include phone contacts in picklist Allow normalize phone numbers option Normalize phone numbers Allow reminders configuration Set reminders (in min) Allow update contact changes to phone option Update contact changes to phone TouchDown: Suppressions -Device Control Allow ActiveSync device type string field ActiveSync device type string field Allow backup database (menu option) Allow backup settings Allow disable tablet mode (tablet devices only) option Disable tablet mode (tablet devices only) Allow exclude attachments from gallery option Exclude attachments from gallery Allow export settings Allow filtered tasks on home screen and widgets option Display tasks on home screen and widgets Allow login ID, address, domain fields Allow quick configuration Allow restore database (menu option) Allow restore settings Allow server name fields TouchDown TouchDown TouchDown TouchDown ZENworks Mobile Management 2.7.x Default Policy Settings Default Policy Settings 14

15 Allow show s on startup option Show list on startup Allow use system background data setting option Use system background data setting TouchDown: Suppressions - Allow always BCC myself option Enable always BCC myself option Allow choose folders Allow disable SmartReplies and SmartForwards option Disable SmartReplies and SmartForwards Allow don t delete s on server option Do not delete on server Allow don t mark read on server Do not mark read on server Allow alerts configuration Allow body style options body style (Corporate/Individual) Allow checking frequency options checking frequency (in minutes) Allow download size options Allow view text size options text size font: Calibri, Arial, Helvetica, sans-serif; size: 11pt; color: black font: Calibri, Arial, Helvetica, sans-serif; size: 11pt; color: black font: Calibri, Arial, Helvetica, sans-serif; size: 11pt; color: black font: Calibri, Arial, Helvetica, sans-serif; size: 11pt; color: black Normal Normal Normal Normal ZENworks Mobile Management 2.7.x Default Policy Settings Default Policy Settings 15

16 Allow s to synchronize options Allow enable HTML options Allow folder language options Allow manage rules option Allow notify on new mail option Send new mail notifications Allow out of office configuration Allow signature line field Policy Low Level Moderate Level Strict Level High Level TouchDown: Suppressions - Security Allow clean SD card on remote wipe option Clean SD card on remote wipe Allow client certs configuration Allow remote kill configuration Remote kill code Allow security policy display Allow S/MIME settings configuration Allow wipe data (menu option) TouchDown: Suppressions - Synchronization REDRUM REDRUM REDRUM REDRUM Allow defer server updates option Enable defer server updates Allow enable SMS syncing (Exchange 2010 Only) option Allow manual sync when roaming option Allow notify on password failure option Send password failure notifications ZENworks Mobile Management 2.7.x Default Policy Settings Default Policy Settings 16

17 Allow notify on polling failure option Send failed polling notifications Allow notify on successful polling option Send successful polling notifications Allow peak time configuration Allow poll during off-peak times option Enable polling at off-peak times ZENworks Mobile Management 2.7.x Default Policy Settings Default Policy Settings 17