The supported actions by platform, enforced by compliance policies, are as follows.

Table 1. Application
Compliance Policy Action Android and Android Legacy Apple iOS Apple macOS Chrome OS QNX Windows Rugged Windows Desktop

Block/Remove Managed App

 ✓ ✓ ✓ ✓

Block/Remove All Managed Apps

 ✓ ✓ ✓ ✓
Table 2. Command
Compliance Policy Action Android and Android Legacy Apple iOS Apple macOS Chrome OS QNX Windows Rugged Windows Desktop

Change Roaming Settings.

 ✓ (iOS 5+)

Enterprise Wipe***

 ✓ ✓ ✓ ✓ ✓

Enterprise Reset

 ✓ ✓
OS Updates ****

✓

Request Device Check-In

 ✓ ✓

Revoke Azure Tokens*.

 ✓ ✓

* Revoke Azure Tokens - This action affects all devices for a given user, disabling any app that relies upon the Azure token.

  • This action requires 'Azure AD Integration' enabled and 'Use Azure AD For Identity Services' enabled, both found in Settings > System > Enterprise Integration > Directory Services under the Server tab.
  • In order for Azure token revocation to work, User Principal Name is a mandatory user account field, so use one of the following methods to make sure it has the correct value.
    1. Navigate to Accounts > Users > List View and edit the targeted user account's User Principal Name (under the Advanced tab) with the same email address they use to log into their Azure account.

      OR

      1. Navigate to Groups & Settings > All Settings > System > Enterprise Integration > Directory Services, select the User tab and select the Advanced drop down section.

      2. Scroll down to User Principal Name and enter the lookup value that corresponds to the email address they use to log into their Azure account.

Table 3. Email
Compliance Policy Action Android and Android Legacy Apple iOS Apple macOS Chrome OS QNX Windows Rugged Windows Desktop

Block Email

 ✓ ✓
Table 4. Notify
Compliance Policy Action Android and Android Legacy Apple iOS Apple macOS Chrome OS QNX Windows Rugged Windows Desktop

Send Email to User**.

 ✓ ✓ ✓ ✓ ✓ ✓

Send SMS to Device.

 ✓ ✓ ✓

Send Push Notification to Device.

 ✓ ✓ ✓ ✓ ✓

Send Email to Administrator.

 ✓ ✓ ✓ ✓ ✓ ✓
Table 5. Profile
Compliance Policy Action Android and Android Legacy Apple iOS Apple macOS Chrome OS QNX Windows Rugged Windows Desktop

Install Compliance Profile.

 ✓ ✓ ✓ ✓

Block/Remove Profile

 ✓ ✓ ✓ ✓

Block/Remove Profile Type

 ✓ ✓ ✓

Block/Remove All Profiles***

 ✓ ✓ ✓ ✓

** Includes option to CC the user's manager.

*** These actions prevent the delivery of profiles until the device reports back a compliant status.

**** The OS update action is available to devices with iOS versions 9 through 10.2.1 if they are supervised and DEP-enrolled. Devices with iOS 10.3 and later need only be supervised.