Product Documentation

Managing Windows Phone 8 Configurations

May 07, 2015

You can create a variety of policy types and configurations for your Windows Phone 8 devices to help manage user and company data, including Windows Phone app distribution through the Enterpise Hub Company store, storage policies (to encrypt stored data and the ability to prevent storage card usage), password policies, Exchange ActiveSync email policies so your users can seamelessly connect to corporate email accounts, as well as your own custom policies.

To create an Enterprise Hub policy for Windows Phone 8 devices

Before create and deploy the Enterprise Hub policy for Windows Phone 8 devices, make sure you have obtained your AET (.aetx file )signing certificate from Symantec and that you have obtained and signed the Citrix Company Hub app (CitrixCompanyStore.xap) using the Microsoft app signing tool (XapSignTool.exe). For more information, see To add an external Windows Phone 8 app.

Note: Before you deploy the Enterprise Hub policy to devices, ensure that your users have been enrolled into Device Manager, or the policy will not work.
  1. In the Device Manager web console, select the Policies tab.
  2. Under MDM Policies on the left, select Windows Phone 8 > Configurations > New Configuration > Enterprise Hub.
  3. In the Create an AET cert and/or enterprise app store configuration dialog box, enter a name for the policy.
  4. Next, click on the Choose file buttons to upload the AET file and the signed Citrix CitrixCompanyStore.xap to the policy.
  5. Click Create. To deploy the package to your Windows Phone 8 devices, you need to add this policy to a deployment package and deploy it a specified user group. For more information on creating and deploying policies in a deployment package, see To create and deploy a deployment package.

To access apps on the Windows Phone 8 Work Home App Store

  1. When apps have been deployed through XenMobile to a user's Windows Phone 8 device, the apps can be access through the Windows Phone 8 Worx Home app store. To access the app store, on your Windows Start Screen, tap the Worx Home tile.
  2. In the Worx Home login screen, enter your Device Manager (or for XenMobile user name and password (the same one uses when you enrolled), and then tap the arrow button. (Authentication is only required once.)
  3. In the Available Apps screen, you can scroll to the app you want to install. To install an app, tap it and install it.

To create a Windows Phone 8 app deployment package

In order for your Windows Phone 8 users to receive apps through the Company Store, you need to add those apps to Device Manager and deploy them to your users. In addition, you need to make sure you deploy the Enterprise Hub policy as well. You can deploy both the apps and the Enterprise Hub policy using a Device Manager deployment package.

  1. Select the Deployment tab, click New Package and then click New Windows Phone 8 Package.
  2. In the Create New Package wizard, in the Package Name window, enter a name for the package, such as Android App Store, and then click Next.
  3. On the Groups of users window, select the group you created earlier and then click Next.
  4. On the Resources to be deployed window, under Available Resources, scroll to the Enterprise App Store and select the Windows Phone 8 apps you want to add, click the right arrow button and then click Next. If you haven't yet deployed the Enterprise Hub policy, you can add it here.
  5. On the Deployment schedule window, select the If not deployed Start Now option and then click Next.
  6. On the Deployment rules page, click Next.
  7. On the Package summary page, click Finish.
  8. In the packages list, click Deploy.

To perform a selective wipe on a Windows Phone 8 device

When you selective wipe a Windows Phone 8 device using Device Manager, the following is removed from the device:

  • The enterprise token that allows apps to be installed on the device by Device Manager.
  • All Device Manager certificates.
  • All Device Manager configurations that have been deployed to the device.
  1. From inside the Device Manager web console, select the Devices tab.
  2. To find the Windows Phone 8 device you want to selectively wipe, sort the list using the OS filter.
  3. Select the check mark next to the device you want to selectively wipe.
  4. From the Security menu, choose Selective Wipe.

To configure Windows Phone 8 Exchange ActiveSync policies

You can use this policy to preconfigure and deploy your corporate Exchange ActiveSync configuration to Windows Phone 8 device users. Note, however, that the policy does now allow you to set the user password. The device user will need to set that parameter from the device after the policy is pushed.

  1. On the Policies tab, under Windows Phone 8, click Configurations.
  2. In the New Configuration menu, click New Configuration > Exchange ActiveSync.
  3. In the Create a new Exchange ActiveSync configuration dialog box, on the General tab, enter the following information:
    1. Configuration Name. Type a name for the policy.
    2. Description. Type an optional description.
  4. In the Email parameters section, enter the following information:
    1. Account name. Enter the name of the Exchange ActiveSync account.
    2. User name. Type the account user name.
    3. Domain. Type the domain for the Exchange ActiveSync server.
    4. Email address. Type the user's email address. In this field, you can use Device Manager system macros ${user.username} and ${user.mail}, which will automatically look up specific users and their email accounts based on the format listed.
    5. Server name. Type the name of the Exchange ActiveSync server.
  5. Click the Advanced tab and enter the following information:
    1. Synchronization Frequency. Select the frequency with which you want the email account on the device to sync with the Exchange Server. This setting specifies how often any new data from the server will be sent to the device.
    2. Synchronization Items. Select the items you want to be synced, such as email, contacts, calendar, and so on.
    3. Logging. Specify the level of detail for logging of Exchange activity (or no logging).
  6. Click Create.

To configure Windows Phone 8 password policies

  1. On the Policies tab, under Windows Phone 8, click Configurations.
  2. In the New Configuration menu, click new Configuration > Password Policy.
  3. In the Create a password policy dialog box, on the General, enter a name for the policy and a brief description.
  4. In the Policies section, configure your Windows Phone 8 password policy according to the standards of your IT department. The password policy options are as follows:
    Option Description
    Require a password on the device Enables password protection on the device. If cleared, the device does not require a password on the device (unless the device user sets it manually).
    Allow simple password Allows the use of a simple password, which is one consisting only of repeated "2222" or sequential “abcd" characters.
    Password complexity
    • Alphanumeric: Requires that at least one character of the password is a letter.
    • Alphanumeric or Numeric: Requires that the password contain either at least one letter or one number (but not both).
    • Alphanumeric, Numeric, or none: Password can contain both alphanumeric and numeric characters.
    Minimum password length Allows you to set the minimum overall length (in characters) required for the password.
    Minimum password complex characters Allows you to the number of characters that are required to be present in the password. The characters are defined as: lower case alphabetical characters, upper case alphabetical characters, numbers, non-alphanumeric characters. For example, if the value is 2, a password with both upper case and lower case alphabetical characters would be sufficient, as would a password with lower case alphabetical characters and numbers.
    Password expiration (in days) Allows you to specify the number of days for which the password can remain unchanged. After the set number of days, the user is forced to change the password before the device is unlocked.
    Password history Allows you to specify the number of previously used passwords to store. When a user creates a new password, the user can't reuse a stored password that was previously used.
    Inactivity before device lock (in minutes) Allows you to specify the length of time that the phone can be inactive before the password is required to reactivate it. You can specify any interval between 30 seconds and 1 hour. The default is 15 minutes. The format of the setting is hh.mm:ss; for example, 15:00 = 15 minutes.
  5. Click Create. The new policy appears in the Policies list.

To create Windows Phone 8 storage policies

  1. In the Device Manager web console, click the Policies tab, click to expand Windows Phone 8 and then click Configurations.
  2. In the New Configuration menu, click Storage Policy.
  3. In the Create a storage policy configuration dialog box, General section, type a name for the policy.
  4. Next, select one or both of the policy options:
    1. Require Device Encryption. Select if you want all data stored on the device to be encrypted. Selecting this option ensures that no one will be able to access the data without the PIN code, even if the device is cracked and the chip is removed.
    2. Disable Storage Card. Select if you want to prevent a user from storing data on an external storage card.
  5. Click Create.

To configure Windows Phone 8 custom policies

  1. On the Policies tab, under Windows Phone 8, click Configurations.
  2. In the New Configuration menu, click New Configuration > Custom Policy.
  3. Enter your own custom XML configuration for Windows Phone 8, and then click Validate.