Windows Device Profile

Device Profile is a feature that helps you to group your policies together. Once a profile is created, you can apply it to multiple devices. Any change that you make in device profile will be automatically applied to all the devices. You can also apply a Device Profile to a Device Group so that you can easily group your devices and manage their settings as well.

In this guide we will see how to create a Windows Device Profile and the various settings that can be used.

Before You Begin

1. Make sure to Sign In to ScaleFusion Dashboard.
2. As per our observation we have seen that not all the features work on the various versions of Windows 10 and some do not work at all although as per the Windows 10 protocol they are supposed to work. The iconography below indicates the feature compatibility,

	Indicates that the feature works as expected.
	Indicates that the feature is supported by Windows 10 protocol, but DOES NOT work as intended.
	Indicates that the feature does not work.

Creating and Configuring a Profile

1. Navigate to Device Profiles & Policies > Device Profiles and click CREATE NEW PROFILE button.

   

2. In the create profile dialog select Windows tab. Enter a name for your profile and click on SUBMIT.

   

3. The Profile Creator wizard will be launched. The device profile creation is divided into 4 sections,
   1. Select Apps: Section to configure your application policy.
   2. Allowed Websites: Section to allow websites to be used with Google Chrome.
   3. Passcode Settings: Section to configure passcode settings on managed Windows devices.
   4. Chrome/Edge Configurations: Additional settings for Google Chrome and Microsoft Edge.
   5. Settings: Section to configure additional settings based on categories.
4. Select Apps: The first step is to configure the application policy. Choose an application policy and click NEXT

   Feature	Description	Supported on
   Multi-App Kiosk Mode	Select the list of applications that should be allowed. You can allow both UWP and Win32 apps. For more details, click here Multi-App Kiosk mode can be set with Modern Management mode or Scalefusion MDM agent enrollment mode.	Win 10 Pro Win 10 Enterprise Win 7 Win 8.1
   App Locker Policy	With this option, select the apps and configure to allow or block those apps. For more details, please click here.	Win 10 Pro Win 10 Enterprise
   Skip Application Policy	Select this option if you do not want to define an application policy for your windows devices.	Win 10 Pro Win 10 Enterprise Win 7 Win8.1

5. Allowed Websites: Configure the URLs that a user is allowed to browse on Google Chrome or Windows Kiosk Browser app, by following our guide here.
6. Passcode Settings: You can set the passcode policy inside the device profiles. This provides the flexibility for the IT admins to define passcode policy of different complexities to devices in different profiles. To configure, Toggle on the button Override Global Password Policy, only then the passcode settings become configurable.
   The policy created here will override the global passcode settings and will be applied to the devices of this Windows profile.
7. Google Chrome and Microsoft Edge Configurations: Use this section to configure Google Chrome settings. Please refer to our help document here.
8. Settings > Kiosk App: Use this option to set an application to run always and set the Windows Device in Kiosk app mode. Please refer to our help document here.
9. Other Settings: To configure other profile settings, please visit here.
10. Once you have configured the various settings, click on UPDATE PROFILE . Once the profile is saved, it will appear in the list of Device Profiles.

Applying a Device Profile to Windows Devices

Once a device profile is created, you can easily apply to the devices. You have the following options,

1. Applying a Device Profile at Enrollment: If you are looking to apply a device profile right when the device enrolls, then create an Enrollment Configuration and in the Group/Profile section select Windows Profile that you want the devices to enroll it. Use the enrollment link to enroll the devices.
2. Changing a Device Profile after Enrollment: Follow the steps below to change the device profile,
   1. Navigate to Device Management > Device Profile and select Device Profile to which the device belongs.
   2. Click on the APPLY button on the actions panel on right side.

      

   3. You will be shown a dialog with all the Device Groups & Devices which are not associated with a device profile currently. Select the Device Group(s) or navigate to the Devices tab, select the devices and click APPLY

      

3. Applying a Windows Profile via Device Group: If you intent to use Device Groups, then you can add/modify a Windows Profile to a windows group. The selected Windows Profile will be applied to all the devices in this group.

Removing a Device Profile from Windows Devices

If you want to move the device to a different device profile, then first you have to remove it from its existing profile. Follow the steps below to do so,

1. Navigate to Device Management > Device Profile and select Device Profile to which the device belongs.
2. Click on the Remove button from the actions panel on right and select Remove Devices.

   

3. You will see a dialog with all the devices where this profile is applied. Select the devices and click on REMOVE.

   

Frequently Asked Questions

Question: In Device Profile, under the Select Apps section, I don't see the applications that are installed on the enrolled devices?

Answer: ScaleFusion can collect the information only about the UWP applications or the applications installed from Windows Store. ScaleFusion collects this information when a new device enrolls and every 2 hours after enrollment. If the list is still not updated then you can do the following,

• Navigate to Devices section.
• Click on the Device that has the application installed.
• On the bottom panel and next to the Windows frame, click on Sync Apps option.

Question: We see quite a few settings marked as .Why does ScaleFusion allow control of the settings that are not working?

Answer: We had contemplated not adding these settings. However these are the ones that Windows MDM protocol claims to be supported and still not marked deprecated. Hence we have retained them with the assumption that it will work in future versions. Once the Windows documentation marks them deprecated or unsupported, we will remove them.

Question: The Exchange/Email settings are not removed from the device when we remove it from a Device Profile?

Answer: This is the intended behavior. As Exchange/Email are critical business information and is data intensive operation, we have not removed it when the devices are merely removed from Device Profile. This is based on the assumption that you would move the device to a different profile which will have the same exchange/email configuration.

Question: None of profile settings are removed from the device when we remove it from a Device Profile?

Answer: Yes. Removing a device retains its last profile/policy settings. We are in the process of adding a feature that lets you apply/remove policy that will allow you to temporary relax the policies on the device. However if you want to completely Unenroll the device, please use the Delete Device option.