User Guide

Chapter 2 Creating and Deploying Configuration Profiles 33
The identifier is important because when a profile is installed, the value is compared
with profiles that are already on the device. If the identifier is unique, information in
the profile is added to the device. If the identifier matches a profile already installed,
information in the profile replaces the settings already on the device, except in the case
of Exchange settings. To alter an Exchange account, the profile must first be manually
removed so that the data associated with the account can be purged.
To prevent a user from deleting a profile installed on a device, choose an option from
the Security pop-up menu. The With Authorization option allows you to specify an
authorization password that permits the removal of the profile on the device. If you
select the Never option, the profile can be updated with a new version, but it cannot
be removed.
Passcode Settings
Use this payload to set device policies if you aren’t using Exchange passcode policies.
You can specify whether a passcode is required in order to use the device, as well as
specify characteristics of the passcode and how often it must be changed. When the
configuration profile is loaded, the user is immediately required to enter a passcode
that meets the policies you select or the profile won’t be installed.
If you’re using device policies and Exchange passcode policies, the two sets of policies
are merged and the strictest of the settings is enforced. For information about supported
Exchange ActiveSync policies , see “Microsoft Exchange ActiveSync” on page 8.
The following policies are available:
 Require passcode on device: Requires users to enter a passcode before using
the device. Otherwise, anyone who has the device can access all of its functions
and data.
 Allow simple value: Permits users to use sequential or repeated characters in their
passcodes. For example, this would allow the passcodes “3333” or “DEFG.”
 Require alphanumeric value: Requires that the passcode contain at least one letter
character.
 Minimum passcode length: Specifies the smallest number of characters a passcode
can contain.
 Minimum number of complex characters: The number of non-alphanumeric characters
(such as $, &, and !) that the passcode must contain.
 Maximum passcode age (in days): Requires users to change their passcode at the
interval you specify.
 Auto-Lock (in minutes): If the device isn’t used for this period of time, it automatically
locks. Entering the passcode unlocks it.
 Passcode history: A new passcode won’t be accepted if it matches a previously used
passcode. You can specify how many previous passcodes are remembered for this
comparison.