You can set any
number of parameters that will affect the deployment outcome of a package.
For example, your
package deployment could be based on a specific operating system version, on a
particular hardware platform, or some other combination. In this wizard, you
will find both a Base and Advanced rule editor. The Advanced view is a
free-form editor. The image below illustrates the Deployment Rules screen
accessible when adding or editing an app:
rules are comprised of predefined tests and resulting actions. When possible,
the results are pre-built into the example tests. For example, when basing a
package deployment on a hardware platform, all existing known platforms are
populated into the resulting test, drastically reducing your rule creation time
and limiting possible errors.
to add a rule to the package.
Note: The rule
builder includes further information, specific to each test.
To create a new
rule, you select a rule template, select the condition type, and then customize
the rule. Customizing the rule includes modifying the description. When you
finish configuring settings, you add the rule to the package.
You can add as many
rules as you want. The package is deployed when all of the rules match.
If you click on the
Advanced tab, the
Rule Editor appears.
In this mode, you
can specify what relationship is set between the rules. The operators
NOT are available.
About Device Ownership in XenMobile
Device ownership includes corporate-owned devices and includes user-owned devices, also known as bring your own device (BYOD). You can control how BYOD devices connect to your network in two places in the XenMobile console: on the Deployment Rules page and through XenMobile server properties on the Settings tab.
By setting server properties, you can require all BYOD users to accept corporate management of their devices before they can access apps, or you can allow users access to corporate apps without also managing their devices.
- When you set the server setting wsapi.mdm.required.flag to true, all BYOD devices are managed and any user who declines enrollment is denied access to apps. Setting wsapi.mdm.required.flag to true should be considered in environments in which enterprise IT teams need high security along with a positive user experience, which comes from enrolling user devices in XenMobile.
- If you set wsapi.mdm.required.flag to false, which is the default setting, users can decline enrollment, but may still access apps on their devices through the Worx Store. Setting wsapi.mdm.required.flag to false should be considered in environments in which privacy, legal, or regulatory constraints require no device management, only enterprise app management.
For more information about setting the server properties, see Server Properties.
Users with devices that are not managed can install apps through the Worx Store. Instead of device-level controls, such as selective or full wipe, you control access to the apps through app policies. The policies, depending on the values you set, require the device to routinely check the Xenmobile server to confirm that the apps are still allowed to run.