Removing a policy from a device that belongs to a device groupSolved

Participant
Discussion
1 day ago Mar 05, 2026

I’m trying to remove a policy from a device and assign a different one instead. 

navigated to the device in the Manage tab and opened the Policies sub-tab, but I don’t see any option to remove the policy from the device. How can I remove the existing policy so I can apply a new one? 

Replies (4)

Marked SolutionPending Review
Hexnode Expert
1 day ago Mar 05, 2026
Marked SolutionPending Review

You can normally remove a policy directly from the device by following these steps: 

  1. Navigate to Manage > Devices. 

  1. Select the device. 

  1. Open the Policies sub-tab. 

  1. Click the Remove (delete) icon next to the policy to remove it from the device. 

If the remove icon is not visible, the policy may be applied through a device group rather than directly to the device. 

Could you check whether the device belongs to a device group? 

You can verify this by navigating to: 

Manage > Devices > Select device > Device Group sub-tab 

Marked SolutionPending Review
Participant
1 day ago Mar 05, 2026
Marked SolutionPending Review

I checked and the device is part of a device group. That’s probably why I can’t see the remove option. 

Marked SolutionPending Review
Hexnode Expert
1 day ago Mar 05, 2026
Marked SolutionPending Review

That would explain it. When a policy is associated with a device group, the policy is inherited by all devices within that group. In such cases, the policy cannot be removed directly from the device. 

Instead, you’ll need to modify the group assignment. 

First, identify the device group by navigating to: 

Manage > Devices > Select device > Device Group 

Then proceed depending on the group type. 

If the device belongs to a static device group: 

  1. Navigate to Manage > Device Groups. 

  1. Select the relevant device group. 

  1. Remove the device from the group using the delete icon next to the device entry. 

Once the device is removed from the group, the policies associated with that group will no longer apply to the device. 

If the device belongs to a dynamic device group: 

Dynamic groups automatically include devices based on defined criteria. In this case, you can create an exception for the device. 

  • Navigate to Manage > Devices and select the device. 

  • Go to Device Info and copy the device Serial Number or UDID. 

  • Navigate to Manage > Device Groups and select the dynamic group. 

  • Open the Criteria section. 

  • Add an exception rule and paste the Serial Number or UDID so the device is excluded from the group. 

After the device is excluded from the group, the group policy will no longer apply, and you can assign a different policy if required. 

Marked SolutionPending Review
Participant
15 hours ago Mar 06, 2026
Marked SolutionPending Review

That clears it up. The device was part of a dynamic group, so I’ll add an exception for the device and then apply the new policy. Thanks for the guidance! 

Save