Kaspersky Security Center Web Console and Cloud Console allow you to create group policies for the purpose of managing mobile devices.
To create a group policy:
In the main window of Kaspersky Security Center Web Console or Cloud Console, select Devices > Policies & profiles.
In the list of Kaspersky Security Center group policies that opens, click Current path to select the administration group for which you want to create a policy.
By default, the new group policy is applied to the Managed devices group.
Click Add to start the Policy Creation Wizard. Proceed through the Wizard by using the Next button.
Select Kaspersky Security for Mobile (Policies).
Type the name for the new policy in the Name field. If you specify the name of an existing policy, it will have (1) added at the end automatically.
Select the policy status:
Active
The Wizard saves the created policy on the Administration Server. At the next synchronization of the mobile device with the Administration Server, the policy will be used on the device as the active policy.
Inactive
The Wizard saves the created policy on the Administration Server as a backup policy. This policy can be activated in the future after a specific event. If necessary, an inactive policy can be switched to active state.
Several policies can be created for one application in the group, but only one of them can be active. When a new active policy is created, the previous active policy automatically becomes inactive.
You can enable or disable two options of inheritance, Inherit settings from parent policy and Force inheritance of settings in child policies:
If you enable Inherit settings from parent policy for a child administration group and lock some settings in the parent policy, then you cannot change these settings in the policy for the child group. You can, however, change the settings that are not locked in the parent policy.
If you disable Inherit settings from parent policy for a child administration group, then you can change all the settings in the child group, even if some settings are locked in the parent policy.
If you enable Force inheritance of settings in child policies in the parent administration group, this enables the Inherit settings from parent policy option for each child policy. In this case, you cannot disable this option for any child policy. All the settings that are locked in the parent policy are forcibly inherited in the child groups and you cannot change these settings in the child groups.
In the policies for the Managed devices group, the Inherit settings from parent policy option does not affect any settings, because the Managed devices group does not have any upstream groups and therefore does not inherit any policies.
By default, the Inherit settings from parent policy option is enabled and the Force inheritance of settings in child policies option is disabled.
If you want, you can define the settings of the newly created policy. To do so, select the Application settings tab, and then proceed as described in the "Defining policy settings" section.
Alternatively, you can do that later.
Click Save to create the policy.
A new group policy for managing mobile devices is created.