Category filter

Configure restrictions for Linux devices enrolled in Hexnode

The Restrictions policy helps IT administrators to configure a wide range of settings, allowing them to enable or restrict specific features and functionalities on user devices. This policy, in turn, can help prevent unauthorized access to corporate data and resources, protecting sensitive information from data leaks. Once the policy is successfully applied to the device, the user can no longer modify the settings configured by the administrator. Hexnode UEM allows restrictions to be applied to various settings, including device functionality, network configurations, and more. Here’s how you configure Linux device restrictions from the Hexnode UEM console.

How to apply Linux device restrictions?

To configure Linux device restrictions via the Hexnode UEM portal,

  1. On the Hexnode UEM console, navigate to Policies tab.
  2. Click on the New policy button to create a new blank policy or continue with an existing policy.
  3. Enter a suitable policy name and description in the required fields.
  4. Navigate to Linux > Restrictions and configure the policy.

Restrictions

Linux device restrictions supported by Hexnode UEM.

Allow Device Functionality

Device Functions
Restrictions Description
Camera When the option is disabled, it prevents camera usage on the device.
USB Mass Storage When the option is unchecked, it disables access to external mass storage devices.
USB File Transfer Disabling this option prevents file transfer via USB.

Allow Network Settings

Network Restrictions
Restrictions Description
Wi-Fi Unchecking this option prevents users from turning Wi-Fi on/off on their devices.
Warning:


Disabling Wi-Fi without an alternative internet connection will interrupt the device’s communication with the UEM.

Bluetooth When this option is unchecked, it restricts users from turning Bluetooth on/off.
Configure VPN When the option is disabled, users cannot configure VPN settings in the device.
Note:


This restriction is supported only on GNOME-based Linux devices.

How to associate the policies with device/groups?

There are two ways by which you can associate restrictions to the devices in bulk.

If the policy hasn’t been saved yet,

  1. Navigate to Policy Targets.
  2. Click on + Add Devices.
  3. Browse and select the devices from the list of devices.
  4. Press OK to save the devices.

Apart from devices, you can also associate the policies with Device Groups, Users, User Groups, or Domains from Policy Targets. 

If the policy is already saved,

  1. Select the required policy from the list of policies.
  2. Click on Manage > Associate Targets.
  3. Add the device(s)/device group(s)/user(s)/user group(s)/domain(s) to which the policy needs to be associated.
  4. Click on Associate.
  • Managing Linux devices