Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

Lag Time For Policies to Take Effect.

Created: 05 Jan 2013 • Updated: 09 Jan 2013 | 3 comments
This issue has been solved. See solution.

Hi there guys,

I have successfully implemented MDM 7.2 in my customer's environment. Everything works fine and well. The IPADS are able to receive commands from the console however it seems that policies that are set does not happen immediately. There is a lag time between 10-15 minutes before the policies take effect on the devices.

Initiating commands like auto-locking, publishing an item onto the mobile library happens immediately on the device but not for things like passcode policies, blocking applications, blocking camera and so forth.

I enabled a passcode policy from the console and had to wait at least 15 minutes for it to take effect on the IPAD devices.The very same thing happened for blocking camera.

I'd like to know if this is normal? Is there any setting that I can tweak so that the effect takes place immediately?

Currently we are ONLY doing for IPADs.  Androids and others are not in scope.

Thank you very much.

Appreciate the advice.

Comments 3 CommentsJump to latest comment

rscovel's picture

By default a devices Agent polls for policy updates every 30 minutes.

This is set under Mobile Management/Settings/General Enrollment/Agent Settings.

You can configure this to be more often, but this can also have an effect on battery life and data transfer rates.

You can manually tell individual devices to update their policies immediately (or close to it). Go to Manage Mobile Devices, right click on the device you want to have updated and then choose to have it request policy updates.

Updates in this area are in the works

Russ Scovel
Inside Systems Engineer

Altiris SOS – Endpoint Management and Mobility
Symantec Corporation 
www.symantec.com

SOLUTION
mclemson's picture

This is normal behavior, as mentioned by rscovel above.  In general, policy-based management doesn't need to be performed in real-time.  It needs to be enforced on an ongoing basis, which is why policy is checked on a schedule.

Mike Clemson, Senior Systems Engineer, ASC
Intuitive Technology Group -- Symantec Platinum Partner
intuitivetech.com

AIDIL HARITH's picture

Hi guys thanks. The issue has been solved by RSCOVEL.

Many thanks for the input. You guys truly deserve a cookie :)