Skip to main content

Software Policy

Learn more about configuring Software Policy to control app access on managed devices.

The Software Policy feature in the Fleet module allows you to control which applications are permitted or restricted on managed devices. Whether you're enforcing a strict allowlist, blocking specific apps, or setting up kiosk-mode restrictions, this feature ensures your organization's software usage aligns with security, productivity, and the compliance requirements.

Each policy can be tailored by platform (e.g., Android, macOS, Windows) and assigned to specific AutoPilot groups or devices. This gives you fine-grained control over app access across your fleet and ensures only approved software is running on corporate-managed endpoints.

Use Software Policies to:

  • Prevent the usage of risky or unapproved apps

  • Enforce focused work environments via kiosk mode

  • Meet regulatory requirements for software access

  • Streamline the app landscape across departments

The policy setup process is broken into three stages:

  1. Policy Details – Define the name, type, and target platform.

  2. Select Apps – Choose which apps to allow or block.

  3. Assignment – Apply the policy to AutoPilot groups or individual devices.

Each row represents a single policy. Columns include:

Column

Description

Checkbox

Select policies for batch actions

Name

Custom name given to the policy, e.g., "Teachers", "Motion Design"

Type

Policy type: "Allowed list", "Blocked list", or "Kiosk"

Platform

Target OS/platform the policy applies to (macOS, iOS, Android, etc.)

App count

Number of apps included in the policy

Assigned AutoPilot(s)

AutoPilot groups or segments to which this policy is applied to

Created by

The admin who originally created the policy

Last modified

Timestamp of the most recent update to the policy

Prerequisites

  • Required permissions: Super Admin, IT Admin L2 or above

  • Supported platforms: Android, iOS, iPadOS, macOS, Windows, tvOS, Ubuntu

  • Time estimate: ~10 minutes per policy

  • Additional requirements: Devices enrolled in AutoPilot and app inventory synced

Before You Start

When to use this feature:
Deploy Software Policies when you need centralized control over which applications can be used on company devices. This is especially useful during onboarding, audits, or when rolling out security-critical software policies.

What it impacts:
Software Policies directly affect app visibility and usability on managed devices. Incorrect settings could block access to critical tools, so review carefully before publishing.

Preparation checklist:

  • Know your allowed or blocked apps

  • Confirm devices are enrolled and visible in AutoPilot

  • Ensure the app inventory is synced for app selection

If you have more questions regarding the software policies, please contact the Trio team.

Did this answer your question?