When a new device is created in DME, a set of default settings for the device is sent to the client the first time the device connects with the server, or when a new user takes over an existing device. Through a careful use of default settings and locking device settings you can enforce your company's security policies. In the following, a setting can be anything found in the Default settings setup panel - settings, files, application blocks, etc.
You can specify settings for a device at device at three levels:
DME uses the following order of inheritance when pushing settings etc. to a device:
This can be illustrated in the following way:
Settings set in Default settings apply to any device, unless the same setting has been changed for a group of which the device is a member, or changed for that device only. In the illustration above, the settings A, B, and C are applied to all devices. Devices that are member of Group A do not get default settings for settings D, E, F, G, and H, but inherit them from Group A. Furthermore, the specific device A does not inherit settings F, G, or H from the group, but gets the settings from the specific device.
This way you can set up a security policy by specifying strict default settings, and possibly make more relaxed settings for selected groups of devices or individual devices. For more information about how membership of different groups is handled, see Group hierarchy and inheritance.
When you have specified the various categories of settings in this setup panel as desired, remember to click Save to commit the settings to the DME server.