# Restrict a user to approved devices

To limit a user to approved devices, open the user from Manage Users, go to the Device Access tab and switch Restrict Email Access on. Type a Device Name and click Allow for each device the user may use. To stop a device, deactivate it in the List Of Allowed Devices.

## How to restrict a user to approved devices

1. Open **Manage Users** under your domain and click the user's login name.
2. Open the **Device Access** tab.
3. Switch **Restrict Email Access** on.
4. Type a **Device Name** and click **Allow**.
5. Ask the user to set up that device and start using it.

## What it does

With **Restrict Email Access** off, the user can set up any device to read their mail. With it on, the user can use only the devices you approve here, one by one.

## Options

| Option | What it does |
|---|---|
| **Restrict Email Access** | **ON** or **OFF**. When on, the message "User is allowed to use/configure any below devices to access emails" appears and the device boxes open. |
| **Generate App Key** | Lets the user generate a separate password (app password) for IMAP and SMTP mail apps. **Create** makes a key and shows it in the box beside the switch. **Remove** deletes it. |
| **Device Name** | A name for the device, up to 30 characters. Use letters, numbers, spaces, hyphens, dots and underscores. Names are saved in capitals. |
| **Allow** | Approves one device with that name. A message tells you to ask the user to configure the device. Each name must be new for this user. |
| **List Of Allowed Devices** | Every approved device with its password-generated date and time, last access date and last access IP. Use the deactivate icon to stop a device, and the refresh icon to reload the list. |

## Example

> Meera at acme.in uses Outlook at work and a phone. Rohit switches **Restrict Email Access** on for her, allows a device called `OUTLOOK-OFFICE` and one called `MEERA-PHONE`, and tells her to set up each one. When her old phone is lost, he deactivates its entry in the list.

## Good to know

- Each allowed device can be set up once. After the first successful sign-in on the device, the user cannot use that approval on another device.
- Support administrators do not see this tab.

## Common questions

**How do I remove a device?**

Find it in **List Of Allowed Devices**, click the deactivate icon in its row and confirm.

**What happens when I switch Restrict Email Access off?**

The user is allowed to configure any device to access email again.


Source: https://docs.xgenplus.com/admin/restrict-user-devices/