Limiting enterprise applications and settings on devices

A method, implemented at a computer system that includes one or more processors, for registering the computer system for use in an enterprise, the method comprising:

• receiving, from a device management infrastructure of the enterprise, an executable system management component;
• installing the executable system management component at one or more storage devices of the computer system;
• executing the system management component at the one or more processors, wherein executing the system management component causes the computer system to perform at least the following:
• register the computer system with the device management infrastructure, including applying at least one user-selectable device settings policy from a plurality of user-selectable device settings policies received from the device management infrastructure to a configuration of the computer system, applying the at least one device settings policy comprising at least:
• receiving a selection of the at least one device settings policy from a user of the computer system;
• and
• configuring the computer system in accordance with the at least one selected device settings policy, wherein configuring the computer system in accordance with the at least one device settings policy comprises implementing one or more device restrictions that correspond to the computer system based on the at least one selected device settings policy;
• and
• configure the computer system to initiate execution of scheduled maintenance tasks received from the device management infrastructure according to a preset schedule of one or more scheduled maintenance tasks;
• and
• executing at least one of the one or more scheduled maintenance tasks at the one or more processors based on the preset schedule, at least one execution of the at least one maintenance task causing the computer system to perform at least the following:
• receive one or more updated device settings policies from the device management infrastructure, and apply the one or more updated device settings policies to the configuration of the computer system;
• and
• receive at least one updated application from the device management infrastructure, and install the at least one updated application at the computer system.

A computer program product comprising one or more hardware storage devices having stored thereon computer-executable instructions that are executable by one or more processors of a computer system to cause the computer system to register for use in an enterprise, the computer-executable instructions including instructions that are executable to cause the computer system to perform at least the following:

• receive, from a device management infrastructure of the enterprise, an executable system management component;
• install the executable system management component at one or more storage devices of the computer system;
• execute the system management component at the one or more processors, wherein executing the system management component causes the computer system to perform at least the following:
• register the computer system with the device management infrastructure, including applying at least one user-selectable device settings policy from a plurality of user-selectable device settings policies received from the device management infrastructure to a configuration of the computer system, applying the at least one device settings policy comprising at least:
• receiving a selection of the at least one device settings policy from a user of the computer system;
• and
• configuring the computer system in accordance with the at least one selected device settings policy, wherein configuring the computer system in accordance with the at least one device settings policy comprises implementing one or more device restrictions that correspond to the computer system based on the at least one selected device settings policy;
• and
• configure the computer system to initiate execution of scheduled maintenance tasks received from the device management infrastructure according to a preset schedule of one or more scheduled maintenance tasks;
• and
• execute at least one of the one or more scheduled maintenance tasks at the one or more processors based on the preset schedule, at least one execution of the at least one maintenance task causing the computer system to perform at least the following:
• receive one or more updated device settings policies from the device management infrastructure, and apply the one or more updated device settings policies to the configuration of the computer system;
• and
• receive at least one updated application from the device management infrastructure, and install the at least one updated application at the computer system.