Remove a directly assigned Hexnode policy from multiple devicesSolved

Participant
Discussion
2 days ago Sep 04, 2026

I want to remove one Hexnode policy from multiple users/devices. What is the correct way to remove it from selected devices, or from all devices if needed?

Replies (3)

Marked SolutionPending Review
Hexnode Expert
2 days ago Sep 04, 2026
Marked SolutionPending Review

Hey @sophia_miller,

If the policy was assigned through a device group, remove the device from the policy scope by excluding it from that group.

  1. For a device group-based policy
    1. Go to Manage and open the device.
    2. Open Device Info and copy a unique identifier such as the Serial Number or UDID.
    3. Go to Manage > Device Groups and open the relevant device group.
    4. Open Criteria and select Add Exception.
    5. Configure the exception, for example:
      • Group: Device Info
      • Column: Serial Number
      • Comparator: Is
      • Filter: Paste the copied serial number

    This prevents that device from being included in the dynamic device group and removes policies that are applied through that group.

  2. If the policy was applied directly to devices instead, use the policy target settings:
    1. Go to Policies.
    2. Open the policy you want to remove.
    3. Click Manage in the top-right corner.
    4. Select Modify > Policy Targets.
    5. Remove the devices, users, or groups that should no longer receive the policy.
    6. Save the policy.

You can confirm how the policy is applied by opening Manage > > Policies and checking whether the policy is listed as directly applied or inherited through a group.

Regards,
Isabel Lora
Hexnode UEM

Marked SolutionPending Review
Participant
2 days ago Sep 04, 2026
Marked SolutionPending Review

I was looking at the device group first, but on the device’s Policies tab the policy shows as directly applied. So in that case I should not add a group exception, right?

Marked SolutionPending Review
Hexnode Expert
2 days ago Sep 04, 2026
Marked SolutionPending Review

Correct. A device group exception only helps when the policy reaches the device through that specific device group. If the policy is assigned directly, editing the group criteria will not remove it.

Regards,
Isabel Lora
Hexnode UEM

Save