Yes, my friends iPhone seems to have reported that it accepted all policies . Unfortunately the server is out of my control, and you are right it does not accept Non-Provionable device. I would be interested to know what your collegues can inform us about these policies. To me "requireStorageCardEncryption" could possible be made to work like iPhone and always return yes, after all if there is no storage card, there is nothing to enforce Regarding "requireDeviceEncryption" I thought N9 could support this, but maybe it is my mistake and this is really unsupported?