Manage Policies

Policies define reusable rules that Blueprints in the organization must follow. Use them for controls that should remain consistent, such as sign-in behavior, security restrictions, update expectations, and shared network configuration.

1. Open Configuration > Policies.
2. Select the Policy you want to change.
3. Review each changed value and its effect on linked Blueprints.
4. Expand Advanced settings only when you need a less common category. Only one category opens at a time.
5. Select Save Policy.
6. Use Review in Updates to inspect the Blueprint candidates prepared by the Policy change.

Policy changes can create new Blueprint candidates, but they do not bypass the explicit release and rollout process.

Rename, delete, and revision information live under Management. Wi-Fi networks are managed under Advanced settings > Network and save immediately; they are not part of the Policy draft shown by the save bar.

Directory sign-in

A Policy can let people sign in to managed computers with their Microsoft Entra ID or Google Workspace account, either with a one-time sign-in code or with their directory password at the login screen. Directory connections and organization-wide local account groups are configured once under Settings > Sign-in sources. The Policy then selects the source its computers use. Follow Set up directory sign-in to choose a source, test the connection, and deploy the resulting Policy change safely.

Caution

A broad Policy change can affect many computers. Test security, network, and sign-in changes on a representative computer before organization-wide deployment.