Will updating a policy force an app to re-download on my whole fleet?Solved

Participant
Discussion
2 days ago May 06, 2026

Hey everyone, quick question about how policies actually work under the hood. 

I have a single policy assigned to about 5,000 devices. It pushes our core Enterprise App, but it also has our standard Wi-Fi configurations in it. I need to go in and update the Wi-Fi password today. 

If I edit that policy and hit save, is Hexnode going to push the entire policy again and force all 5,000 devices to re-download that massive app? I absolutely cannot afford to cause that kind of network congestion right now. How does the system handle this? 

Replies (1)

Marked SolutionPending Review
Hexnode Expert
18 hours ago May 07, 2026
Marked SolutionPending Review

Hi @carter, 

This is a fantastic question and a very common concern when managing devices at scale. The short answer is: No, the app will not re-download. Hexnode operates on a declarative architecture using a concept called Idempotency. In simple terms, idempotency ensures that applying a configuration multiple times results in the exact same target state without causing redundant downloads or repeated actions. 

Because you are using a Required Apps policy (rather than a one-time script), Hexnode automatically handles this logic for you: 

  1. Drift Detection: When you save the policy with the new Wi-Fi password, Hexnode does trigger an evaluation across the 5,000 devices. 

  1. Comparing States: The Hexnode agent on each endpoint cross-references the “Desired State” (what the policy mandates) against the “Live State” (what is actually on the device). 

  1. The Delta Execution: Hexnode checks the app’s internal manifest (the Bundle Identifier and Version Number). If it sees that com.company.fieldapp Version 2.0 is already installed, it completely ignores the app payload and only pushes the updated Wi-Fi payload. 

Pro-Tip for macOS/Windows: To make this process even more bulletproof on desktop operating systems, you can define exact Success Criteria within the policy. You can tell Hexnode to verify the installation by checking if the specific Bundle ID exists or if the executable file is present at a specific directory path (e.g., /Applications/Microsoft Teams.app). 

So go ahead and update that Wi-Fi password with confidence! Only devices that are missing the app will trigger a download. 

Save