We are assigning multiple policies to the same set of devices, and I want to clearly understand how Hexnode resolves conflicts. For example, if a device is part of two different policies with overlapping restrictions, what determines which policy actually applies? I want to avoid unexpected behavior in production.
How Does Hexnode Handle Conflicting Policies Assigned to the Same Device?Solved
Tags
Replies (3)
Good question. In Hexnode, when multiple policies apply to the same device, the more restrictive setting always takes precedence. For instance, if one policy allows certain apps and another blocks them, the blocklist will be enforced. This ensures security isn’t weakened by overlapping policies.
That makes sense. What about non-conflicting settings? Say both policies mark certain applications as Required. Will the device enforce required apps from both policies?
Yes, in that case there’s no conflict. Required apps from both policies will be enforced together. However, where things get tricky is with mutually exclusive configurations, like assigning two different single-app kiosk modes. In such scenarios, the last applied policy may take effect, but since it’s a contradictory setup, conflicts are expected. Best practice is to ensure only one kiosk policy applies to a device at a time to keep behavior predictable.