About lock and locked settings

You can lock settings that you do not want edited in subgroups. If a setting is locked in a policy, you can edit it in profiles of this policy. If a setting is locked in a policy for one of the groups that are higher in the hierarchy, you cannot edit it in policy profile.

For example, you assign value 1 to setting P in a policy for group G and lock it. Then you can redefine the value of setting P in policy profiles for group G. You cannot change the value A for P in the policy for group S, which is a subgroup of group G; you cannot change this value in policy profiles for group S.

An application can have its own settings. If a setting defined for an application on a device differs from the value defined for this setting in the policy for this application, then, if the setting is locked in the policy, the value from the policy is applied to the device. If the setting is not locked in the policy, the value defined in the application is applied to the device. If the setting was not locked in the policy and you chose to lock it, then the new value, defined in the policy, will be immediately applied to the device.

Page top