---
title: Managing Policies
slug: device-management-apple/managing-policies
createdAt: 2026-10-06T07:47:35.544Z
---

Ivanti EPMM uses policies to regulate the behavior of the devices it manages. Each policy consists of a set of rules. You can create multiple policies for each policy type, but only one active policy of each type can be applied to a specific device.

Refer to Getting Started with Ivanti EPMM for information on the most commonly used policy topics, such as:

- Default policies
- Security policies
- Privacy policies
- Lockdown policies
- Sync policies

The topics in this chapter include the following advanced topics:

- [Working with default policies](docId:979MaN-1FvYY43YhwL2fD)
- [Importing and exporting policies](docId\:V0gz6EiEVroSEe8EEY6v8)
- [Viewing policy status and platform support](docId:335D2aH6TARXhGBXmrc9y)
- [Enabling profile encryption](docId\:CdhVx5tYPfHkNzdBmOS3h)
- [Enabling or disabling encryption on a macOS device](docId:7y6GA2B0Pn84XWYq6duqp)
- [Storing and retrieving FileVault personal recovery keys in Ivanti EPMM (macOS)](docId\:wR6fReicX0w-KZ00JvE0U)
- [Configuring iOS and macOS software updates](docId\:fkQKLW8_IFYQFCoNcOs1Z)
- [Configuring notification settings](docId\:PXU96ixUTJHB10zyVVnfg)
- [Configuring a system policy managed setting](docId\:Nd85Um4v2_Gw9ZwVizF-X)
- [Configuring a system policy control setting](docId\:q8x1iNDLGFKLBvx8rhKKU)
- [Configuring a system policy rule](docId\:kL98pOUoCkgPFtVtpkaXh)
- [Configuring iOS and macOS software updates](docId\:fkQKLW8_IFYQFCoNcOs1Z)
- [Managing the activation lock for iOS devices](docId:3U4G4f6LbSaGF8h9VmxfO)
- [Whitelisting Wi-Fi networks](docId:13AlN05yofzfZXnHQw46V)
- [Ethernet Settings](docId\:sgx060jzOGkZZZ6X5c28h)
- [Configuring firewall settings for macOS devices](docId:_uEmEvVPRDCM_ElYTUojn)
- [Sync policies and battery use](docId\:UHCz_BCTJA_9P5qzND_Nh)
- [Global App Config Settings policy](docId:-O4pnE4aQmEYVFB0afHEq)
- [MTD Anti-Phishing/Smishing Policy](docId:7dTbb38ZvCpzR3T4UzN3y)
- [Work Schedule policy](docId\:ZYzRgSQXno9qh86ZSqlKS)
- [Country changes and alerts](docId\:XUgFeOBCKbesSzgZ6nHI_)
- [iOS location-based wakeups interval and syncing with Ivanti EPMM](docId:6EuODOiPn975t_c5-tyn9)
- [Single-app mode policies](docId\:PIbaJQi2CqLO-pUgDOWrb)
- [Configuring a global HTTP proxy policy](docId\:BaYvnNbgBRSFqRHwT4r69)
- [Cellular policies](docId\:kWFHZrynIhXobJ1qDUHkd)
- [Configuring an eSIM refresh cellular plan policy](docId\:Y8X7yu__gNb4TgCTkihlF)
- [Wallpaper policies](docId\:bxNzd-_PqjFnVxSHHvOUm)
- [Accessibility Settings Policy](docId\:wkWkvuoCfZ9uLxMZRJO37)
- [Creating Default Applications Setting](docId\:iW4o0sAnR7bS0feSa5m8o)
- [Device name policies](docId\:AYVHryluomyn5WJFiBrUW)
- [Customizing a home screen layout](docId\:ZGU1RxOp5jJBaaIGwSUk0)
- [Customizing a lock screen message](docId\:gkpsvzsqR1PtplLLNv1Fy)
- [Configuring notification settings](docId\:PXU96ixUTJHB10zyVVnfg)
- [tvOS policy settings](docId\:jVMRLyjqocuSulc216hYV)
- [Notifications of changes to the privacy policy](docId\:hBbEPDp_lvgdMpvrpbZ3q)
- [Exporting the devices in the WatchList](docId:0f9mEBpc3Sw-rgM65vJQY)
- [Impact of changing LDAP server variables](docId\:tu_4MFJlcMCD4tJJJdBiA)
- [Configuring encrypted DNS settings](docId\:AROusOxa2Kie22v4xs4Ms)
- [Google BeyondCorp Configuration](docId\:TiZC9Ik8wqddT2JDXNN0a)

:::hint{type="info"}
For User Enrollment, Ivanti recommends using the label "Apple User Enrolled Device" + "Equals" + "True" or ios.apple\_user\_enrolled\_device = true."
:::

**Related topics** 

For information on Mobile Threat Defense, including the MTD Local Actions policy, see theIvanti Mobile Threat Defense Solution Guide for EPMM*.*