A server device that is configured to provide service to client devices in a second geographic zone determines that a client device is transitioning from a first geographic zone to the second geographic zone. The server device receives a client device manifest that identifies a configuration of the client device. Based on the client device manifest, the server device determines that the configuration of the client device does not match a policy of the second geographic zone. The server device sends to the client device instructions that, if performed by the client device, will cause the configuration of the client device to match the policy of the second geographic zone.