A method and system for controlling operation of a computing device. One or more applicable settings among settings of one or more features of the computing device are determined. The settings are indicated by policies provided by two or more providers according to priorities of corresponding providers for application of corresponding policies of the providers. The policies include an indication of corresponding settings of the one or more features of the computing device. The providers are validated with at least one authority. The at least one authority certified the priorities of the providers and permissions of the providers to set the features of the policies. The computing device is configured to operate according to the applicable settings of the features.