Review the following link for additional details on Device Policies: Click Here
Below are the top questions around device policies:
Q: Our user does not have GAL (Global address book) functionality on their systems and they are managing local mobile device address by saving vcf file locally on device and importing it manually.
Now they would like to use Citrix Endpoint Management (XenMobile) policy file to deploy address book to Android device and this is working.
Problem is that they still have to manually import new contacts to address book. They would like to make this automatically upon every change in vcf file. Do you have any idea how to make this possible?
A: There is no automatic way to update contacts, you need to rely on pushing the file with the MDM policy and update it manually. There is currently an enhancement request to add GAL support on Secure Mail.
Q: Is it possible to block starting of a Google play but to leave possibility of updating already installed applications?
A: You can use Citrix Launcher in order to block Google Play access from the devices but still they will be able to update the apps. Otherwise it is not possible to update the app since the devices need access by default to Google Play when updating an application. Details about Citrix Launcher
Q: Is it possible to configure a policy which will allow usage of Google Play if the user of mobile device is given PIN key, which can be changed on request of admin?
A: No, this is not possible at the moment. In order to get PIN every application should be wrapped with mdx otherwise is not possible. Alternatively you can use Citrix Launcher to allow access to Google Play for some delivery groups.
Q: How to remove the lock when we lock an Android device (using Secure actions, set Lock, the assigned PIN will stay there and user needs to manually remove lock using mobile device settings)?
A: It is not possible to remove the PIN. It works like this by design at the moment.