Policy Type Supported Comment
Android (Device Administrator)
Custom Yes –
Device restrictions Yes –
Email (Samsung KNOX only) Yes –
MX profile (Zebra only) Yes –
PKCS certificate Yes Dependencies: Trusted Certificate
PKCS imported certificate Yes –
SCEP certificate Yes Dependencies: Trusted Certificate
Trusted certificate Yes Dependencies: PKCS, SCEP
VPN Yes –
Wi-Fi Yes –
Android (AOSP)
Settings catalog Yes –
Device restrictions Yes –
PKCS certificate Yes Dependencies: Trusted Certificate
SCEP certificate Yes Dependencies: Trusted Certificate
Trusted certificate Yes Dependencies: PKCS, SCEP
Wi-Fi Yes –
Android (Enterprise)
Settings catalog Yes –
Device restrictions Yes –
OEMConfig Not supported –
Wi-Fi Yes –
VPN Yes –
Trusted certificate Yes Dependencies: SCEP
PKCS certificate Yes Dependencies: Trusted Certificate
PKCS imported certificate Yes –
Derived credential Yes –
SCEP certificate Yes Dependencies: SCEP, Trusted Certificate
Email Yes –
iOS / iPadOS
Settings catalog Yes –
Custom Yes –
Derived credential Yes –
Device features Yes –
Device restrictions Yes –
Edition upgrade & mode switch Yes –
Email Yes –
PKCS certificate Yes Dependencies: Trusted Certificate
PKCS imported certificate Yes –
SCEP certificate Yes Dependencies: Trusted Certificate
Trusted certificate Yes Dependencies: PKCS, SCEP
Secure assessment (Education) Yes –
VPN Yes –
Wi-Fi Yes –
macOS
Settings catalog Yes –
Custom Yes –
Device features Yes –
Device restrictions Yes –
Endpoint protection Not supported (Deprecated)  
Extensions Not supported (Deprecated)  
PKCS certificate Yes  
PKCS imported certificate Yes –
Preference file Yes –
SCEP certificate Yes Dependencies: Trusted Certificate
Trusted certificate Yes Dependencies: SCEP
Software updates Yes –
VPN Yes –
Wi-Fi Yes –
Wired network Yes –
Windows 10 and later
Settings catalog Yes –
Properties catalog Not supported (Retired) –
BIOS Configurations and other settings Partially supported Keepit supports backup and restore (create, not update) operations.
Custom Yes –
Delivery Optimization Yes –
Device firmware configuration interface Yes –
Device restrictions Yes –
Device restrictions (Windows 10 Team) Yes –
Domain join Yes –
Edition upgrade & mode switch Yes –
Email Yes –
Endpoint protection Yes –
Identity protection Not supported (Deprecated)  
Imported Administrative templates (Preview) Yes –
Kiosk Yes –
Microsoft Defender for Endpoint (Desktop devices running Windows 10 or later) Not supported –
Network boundary Yes –
PKCS certificate Yes  
PKCS imported certificate Yes –
Properties catalog Not supported Support of the Properties catalog needs additional permissions which will be added in next iterations
SCEP certificate Yes Dependencies: Trusted Certificate
Trusted certificate Yes Dependencies: SCEP
Secure assessment (Education) Yes –
Shared multi-user device Yes –
VPN Yes –
Wi-Fi Yes –
Windows health monitoring Yes –
Wired network Yes –
Windows 8.1 and later
Device restrictions Yes –
SCEP certificate Yes Dependencies: Trusted Certificate
Trusted certificate Yes Dependencies: SCEP
VPN Yes –
Wi-Fi Yes –