home

Mobile Endpoint Security

Lookout Product Documentation

Find answers about using and optimizing Lookout products.

Create a Label for Enrollment

Lookout uses an Ivanti EPMM label to identify devices requiring enrollment. To add the enrollment label:

  1. Follow the instructions in the Ivanti documentation: Creating labels.
  2. Set the label Name to Lookout for Work and the Type to Filter.
    All devices included in the filter results get labeled for enrollment with Lookout.

    If you are running a trial deployment, you may wish to create Lookout for Work as a Manual label, and assign devices directly from the Devices & Users > Devices screen. While you can use Advanced Search to apply the same filters as a Filter Label using this method, it does not automatically poll for user group updates and is not recommended for a full deployment.

  3. Configure the filter settings to include the desired groups in your directory services system.

    For example, to set filter criteria based on an LDAP group, select User Fields > LDAP > Groups > Name, set the operator to Equals, and set the value to the name of the LDAP group you wish to enroll.

    Leave Exclude retired devices from search results checked, so that you don’t automatically re-enroll retired devices.