Each policy that you add targets a specific type of device and a particular group of users. Select an Application management ...

Each policy that you add targets a specific type of device and a particular group of users. Select an Application management policy type to determine what happens automatically to protect a device that is lost or stolen and to protect access to Office apps.

Select the Windows 10 device configuration policy type to push security settings, like virus protection, to Windows 10 mobile devices and PCs.

The group you select to get these settings must be a security group. If a user is a member of more than one group to which a policy is applied, the more restrictive settings take effect.