3.2.5.1.1 Responding to an Initial Request

The server SHOULD store the device information that was specified in the settings:DeviceInformation element (section 2.2.2.53) sent by the client device and SHOULD respond to an initial security policy settings Provision command request with a response in the following format. The contents of the PolicyType element (section 2.2.2.43) and the Data element (section 2.2.2.24) depend on the protocol version that is being used. The settings:DeviceInformation element is not supported by some protocol versions. For details about these elements and protocol versions, see the element definitions.

 <Provision>
    <settings:DeviceInformation>
       <settings:Status>...</settings:Status>
    </settings:DeviceInformation>
    <Status>...</Status>
    <Policies>
       <Policy>
          <PolicyType>...</PolicyType>
          <Status>...</Status>
          <PolicyKey>...</PolicyKey>
          <Data>
                ...
          </Data>
       </Policy>
    </Policies>
 </Provision>

The value of the PolicyKey element (section 2.2.2.42) is a temporary policy key that will be valid only for an acknowledgment request to acknowledge the policy settings contained in the Data element.

When a policy setting that was previously set is unset on the server, the server SHOULD specify the element that represents the setting as an empty tag or a default value. In these cases, the client SHOULD either unset these values if they were previously set, or leave the setting unchanged.

The server SHOULD respond to an empty initial Provision command request with a response in the following format. The RemoteWipe or AccountOnlyRemoteWipe MUST only be included if a remote wipe or an account only remote wipe has been requested for the client; otherwise, it MUST be omitted.

 <Provision>
    <Status>...</Status>
    <RemoteWipe/>
 </Provision>

or
 
<Provision>
   <Status>…</Status>
   <AccountOnlyRemoteWipe/>
</Provision>
 
or
 
<Provision>
   <Status>…</Status>
</Provision>