Hello,   I'm trying to restrict the ability of users to change the Passcode, and I'm not having any luck. Here's what I have setup as a test.   I have one Profile with Restrictions Enabled, with a lot of Restrictions, but I have the following setting OFF: [ ] Allow modification of passcode settings Scope is 'with ANY of the following tags'; Device tag 'TEST'     I made a security policy under Policies named 'PWD'. The only thing enabled is "Passcode lock"     I created a second Profile. Scope is 'with ANY of the following tags' No additional Restriction settings. Wallpaper settings enabled. Lock and Homescreen. (Created this as visual test that Profile is pushed.) Device tag 'TEST' Policy tag 'PWD - violating devices'     Yet, I'm still able to change the Passcode. I first tried putting the PWD Policy on the TEST Profile, but for some reason, enabling a Policy Tag on this Profile, pushes the Profile off the device. That's when I read that you should create a second Profile for a Policy. After doing this, the TEST Profile is not pushed off the device, the PWD Profile is on the device, but I can still change the Passcode and the Wallpaper is not changed.   Additional Notes: This device is NOT DEP enrolled. This device is manually enrolled.   Is there something that I'm missing? Thank you   ... View more