Enrollment Policy Wizard

Use the Enrollment Policy Wizard to create and edit enrollment policies for specific devices. For step-by-step instructions, see :

Note: The visibility of the options described below depends upon the selected device.

General


Description	Describe how or where the policy is used.
Enterprise Bindings	For Android Enterprise, choose an account type (None, Managed, Domain). See Enterprise Bindings for more information.
MDM Profile Description	Provide a message for users as they enroll their device.
Name	Enter a name for the policy. Important: This field is mandatory.

Device Type


Device Type	Select one of the available management types for the enrollment policy: Work Managed, Work Profile, Corporate Personal. For more information, see Android Enterprise Devices

Groups


Device Group Destination	Select the device group where the devices plan to enroll.
User Authentication for Enrollment	Choose if you want users to authenticate devices when enrolling them. This field is mandatory. Authentication can be either by password or by directory.

Auto Enroll


Android Migration	Displays the Android Migration pane in the Setup Assistant.
Appearance	Displays the Choose Your Look pane in the Setup Assistant for iOS 13 and later DEP devices.
Apple Id	Displays the Apple ID pane in the Setup Assistant.
Apple Pay	Displays the Apple Pay pane in the Setup Assistant.
Customized Enrollment	Required for modern authentication and terms and conditions (requires iOS 13+).
Diagnostics	Displays the Diagnostics pane in the Setup Assistant.
Display Tone	Displays the Display Tone pane in the Setup Assistant.
Enable Automated Device Enrollment	Choose if you want devices to be automatically enrolled using an Automated Device Enrollment account.
Express Language	Displays the Express Language pane in the Setup Assistant for iOS 13 and later DEP devices.
File Vault	Displays the FileVault pane in the Setup Assistant, which enables the device user to enable the automatic encryption of files.
Home Button Sensitivity	Displays the Home Button Sensitivity pane in the Setup Assistant.
iCloud Diagnostics	Displays the iCloud Analytics pane in the Setup Assistant, which enables the device user to choose whether to send diagnostic iCloud data to Apple.
iMessage and FaceTime	Displays the iMessage and FaceTime pane in the Setup Assistant for iOS 12.0 and later DEP devices.
Location Services	Displays the Location Services pane in the Setup Assistant.
OnBoarding	Displays the Onboarding pane in the Setup Assistant.
Passcode	Displays the Passcode pane in the Setup Assistant.
Preferred Language	Displays the Preferred Language pane in the Setup Assistant for iOS 13 and later DEP devices.
Prevent Un-enrollment	Prevents the device user from removing the MDM profile from the device.
Privacy	Displays the Privacy pane in the Setup Assistant for iOS 11.3 and later DEP devices.
Quick Start	Displays the Device to Device Migration pane in the Setup Assistant for iOS 13 and later DEP devices.
Registration	Displays the Registration pane in the Setup Assistant, which enables the device user to fill out a registration form and sent it do Apple.
Require Enrollment	Automatically enrolls the device in SOTI MobiControl. For LDAP-based enrollment, the device user must enter their credentials when running the Setup Assistant.
Screen Time	Displays the Screen Time pane in the Setup Assistant for iOS 12.0 and later DEP devices.
Select an Automated Device Enrollment account	Select the account to perform Automated Device Enrollment.
Setup new or restore from backup	Displays of the Setup New or Restore from Backup pane in the Setup Assistant.
Shared iPad	Enables Shared iPad for Business configurations for devices with the following: iOS 13.4 or later Apple Business Manager account Managed Apple ID 32GB of storage Note: The Supervise Device option is not required.
Sim Setup	Displays the SIM Setup pane in the Setup Assistant.
Siri	Displays the Siri pane in the Setup Assistant.
Software Update	Displays the Software Updates pane in the Setup Assistant for iOS 12.0 and later DEP devices.
Supervise Device	Enables device supervision over the air upon device activation. The following Apple devices are supervised automatically: iPhone with iOS 13 or later iPad with iPadOS 13.1 or later Mac computers with macOS 10.14.4 or later Note: Turn on Supervised Device for Apple operating systems that are not listed.
Terms and Conditions	Displays the Terms & Conditions pane in the Setup Assistant.
Touch Id	Displays the Touch ID pane in the Setup Assistant.
Wait until device is configured	Forces the device activation wizard on iOS 9.3 and later devices to wait until the MDM has fully configured the device. Users can use the device once fully configured.
Watch Migration	Displays the Watch Migration pane in the Setup Assistant.
Welcome	Displays the Get Started pane in the Setup Assistant for iOS 13 and later DEP devices.
Zoom	Displays the Zoom pane in the Setup Assistant.

Settings


Activation Date	Specify the date that activates the policy.
Activation Time	Specify the time that activates the policy.
Cache Password	Caches the LDAP password entered by the device user during enrollment for 10 minutes. During this time, profiles targeting the device with configurations requiring account credentials (Email, VPN, WiFi, etc.) includes the cached password in the configuration. This avoids repeat prompting for the same credentials.
Customize iPad wallpaper	Set the wallpaper for iPad devices upon enrollment (required iOS 8+ Supervision). If enabled, select image files as the home and lock screen wallpapers.
Customize iPhone wallpaper	Set the wallpaper for iPhone devices upon enrollment (required iOS 8+ Supervision). If enabled, select image files as the home and lock screen wallpapers.
Deploy Latest Plugins to Device	Install plugins on your SOTI MobiControl instance before deploying them to the device.
Device Enrollment Limit	Set the maximum number of devices you can enroll using this enrollment policy.
Draw Over Other Apps	Allow to display content on top of other apps.
Enable Terms and Conditions	Enable the requirement to provide the user with terms and conditions at enrollment.
Enrolled Device Name	Select an identifier for the device. Select the gear icon to insert macros to autofill portions of the device name.
Manage Plugins	Use this window to add device agents and plugins. Select add to select device models you want to add new plugins and agents to.
Modify System Settings	Allow modification of system settings.
Notification Access	Allow to read all notifications posted by system or any installed apps.
Preserve Device Location on Re-enrollment	SOTI MobiControl remembers the group membership of the device when it is re-enrolled.
Preserve Device Name on Re-Enrollment	SOTI MobiControl remembers the previously assigned device name when a deleted device is re-enrolled.
Rule Tag	This tag embeds into device agents belonging to this policy.
Select a template for the Agent certificate	Select a template to issue device identity. Select Manage Certificate Authorities to configure certificate authorities and create dynamic certificate templates for each user and device.
Select the device user's Terms and Conditions	Select terms and conditions that users must accept at enrollment.
Set Deactivation Date	Specify the date and time that deactivate the policy.
Update Personalized Device Name	Allow the Personalized Device Name to update to match the name set in SOTI MobiControl.
Usage Access	Allow to access app history and collect detailed information.