Policy Type Supported Comment
Android (Device Administrator)
Custom Yes
Device restrictions Yes
Email (Samsung KNOX only) Yes
MX profile (Zebra only) Yes
PKCS certificate Yes Dependencies: Trusted Certificate
PKCS imported certificate Yes
SCEP certificate Yes Dependencies: Trusted Certificate
Trusted certificate Yes Dependencies: PKCS, SCEP
VPN Yes
Wi-Fi Yes
Android (AOSP)
Settings catalog Yes
Device restrictions Yes
PKCS certificate Yes Dependencies: Trusted Certificate
SCEP certificate Yes Dependencies: Trusted Certificate
Trusted certificate Yes Dependencies: PKCS, SCEP
Wi-Fi Yes
Android (Enterprise)
Settings catalog Yes
Device restrictions Yes
OEMConfig Not supported
Wi-Fi Yes
VPN Yes
Trusted certificate Yes Dependencies: SCEP
PKCS certificate Yes Dependencies: Trusted Certificate
PKCS imported certificate Yes
Derived credential Yes
SCEP certificate Yes Dependencies: SCEP, Trusted Certificate
Email Yes
iOS / iPadOS
Settings catalog Yes
Custom Yes
Derived credential Yes
Device features Yes
Device restrictions Yes
Edition upgrade & mode switch Yes
Email Yes
PKCS certificate Yes Dependencies: Trusted Certificate
PKCS imported certificate Yes
SCEP certificate Yes Dependencies: Trusted Certificate
Trusted certificate Yes Dependencies: PKCS, SCEP
Secure assessment (Education) Yes
VPN Yes
Wi-Fi Yes
macOS
Settings catalog Yes
Custom Yes
Device features Yes
Device restrictions Yes
Endpoint protection Not supported (Deprecated)  
Extensions Not supported (Deprecated)  
PKCS certificate Yes  
PKCS imported certificate Yes
Preference file Yes
SCEP certificate Yes Dependencies: Trusted Certificate
Trusted certificate Yes Dependencies: SCEP
Software updates Yes
VPN Yes
Wi-Fi Yes
Wired network Yes
Windows 10 and later
Settings catalog Yes
Properties catalog Not supported (Retired)
BIOS Configurations and other settings Partially supported Keepit supports backup and restore (create, not update) operations.
Custom Yes
Delivery Optimization Yes
Device firmware configuration interface Yes
Device restrictions Yes
Device restrictions (Windows 10 Team) Yes
Domain join Yes
Edition upgrade & mode switch Yes
Email Yes
Endpoint protection Yes
Identity protection Not supported (Deprecated)  
Imported Administrative templates (Preview) Yes
Kiosk Yes
Microsoft Defender for Endpoint (Desktop devices running Windows 10 or later) Not supported
Network boundary Yes
PKCS certificate Yes  
PKCS imported certificate Yes
Properties catalog Not supported Support of the Properties catalog needs additional permissions which will be added in next iterations
SCEP certificate Yes Dependencies: Trusted Certificate
Trusted certificate Yes Dependencies: SCEP
Secure assessment (Education) Yes
Shared multi-user device Yes
VPN Yes
Wi-Fi Yes
Windows health monitoring Yes
Wired network Yes
Windows 8.1 and later
Device restrictions Yes
SCEP certificate Yes Dependencies: Trusted Certificate
Trusted certificate Yes Dependencies: SCEP
VPN Yes
Wi-Fi Yes