Profiles are the primary means to manage devices. Configure profiles so your Windows Desktop devices remain secure and configured to your preferred settings.
You can think of profiles as the settings and rules that, when combined with compliance policies, help you enforce corporate rules and procedures. They contain the settings, configurations, and restrictions that you want to enforce on devices.
A profile consists of the general profile settings and a specific payload. Profiles work best when they contain only a single payload.
Windows Desktop profiles apply to a device at either the user level or the device level. When creating Windows Desktop profiles, you select the level the profile applies to. Some profiles can only be applied to the user level or device level. Workspace ONE UEM executes commands that apply to the device context even if the device has no active enrolled user login. User-specific profiles require an active enrolled user login.
Maintaining the best configurations to keep your devices secure can be a challenge. Workspace ONE UEM currates the best practices as Baselines. This feature allows you to simplfy the process by applying industry-recommended settings and configurations. With Baselines, you only need to select a Smart Group and a baseline and your devices will remain up-to-date with industry favorites such as Microsoft Baselines or CIS Benchmarks. Fore more information on Baselines, see Using Baselines.