Hi Chris,
Thank you for your inquiry. Please make sure the following are set correctly in policies
1. Endpoint Policies -> Device Management Settings -> Use the Centrify Identity Platform for mobile device management (default yes)
- This setting allow policies to be applied to the mobile devices and allow users to mangage the device through user portal. User can still enroll their device even this setting is disabled
2. Policy is assigned to both devices & users, not just only the users
Hope this will help. Please let me know if you have further questions. Thank you!
Best Regards,
Sharon