The Android Zero-Touch solution is designed for school-owned devices, giving IT administrators control over an extended range of settings and policy controls.
Follow the steps below to view and configure these controls:
- Access your school’s Mobile Guardian dashboard.
- From the main menu, go to the Profile Section.
- Choose the profile you want to configure (baseline or conditional).
- Click the edit icon next to the profile details.
Configure Restrictions:
- Go to the "What" tab and click on "Restrictions."
- Select the "ANDROID" tab to display all Android Legacy and Android EMM settings.
ℹ️
Note
Legacy Settings apply to all Android devices.
EMM Settings apply only to EMM-enrolled devices.
- Activate the necessary restrictions and click "SAVE" at the bottom.
The settings will apply when you next sync the devices.
Below is a list of settings applicable to Zero-Touch enrolled devices, along with brief descriptions. These settings are displayed on the dashboard and can be enabled or disabled as needed.
App Management
- Block Uninstall Application: Prevents users from uninstalling apps.
- Block Install Unknown APK: Prevents users from installing apps from unknown sources.
- Force Google Play Protect: Enables "Verify Apps" on devices.
Audio
On fully managed devices, this controls the use of the microphone.
- User Choice: Users can enable or disable the option.
- Microphone Access Enforced: Enforces microphone access on the device.
Connectivity Configuration
- Block Cell Broadcasts Configuration: Disables cell broadcasts sent by service providers.
- Block Modification of Mobile Network Settings: Prevents users from modifying mobile network settings.
- Block Resetting of All Network Settings: Prevents users from resetting all network settings.
- Block Bluetooth Connection Configuration: Prevents users from modifying Bluetooth connections.
- Block Modifying Auto Time Zones and Time: Enforces system auto time settings.
- Block Account Modification: Prevents users from adding or modifying accounts.
- Block Factory Reset: Prevents users from factory resetting the device.
Device Connectivity Options
- Block Screenshots and Recordings: Blocks users from taking screenshots or screen sharing using managed apps.
- Block Access to Tethering and Portable Hotspots: Prevents users from using their devices as a portable hotspot.
- Block Outgoing Phone Calls (Excluding Emergency Calls): Blocks outgoing calls except for emergency calls.
- Block Send and Receive SMS Messages: Configures if the device can send and receive SMS messages.
- Block Cellular Data While Roaming: Configures if the device allows cellular data while roaming.
- Block Mounting Physical External Media: Blocks users from mounting external media.
- Block NFC Beam: Blocks users from sharing data via NFC beam.
- Block File Transfer via USB: Blocks users from transferring files over USB.
Screen Lock
- Lock Screen Message: Allows IT admins to set a custom message displayed on the lock screen without unlocking the device.
Location Services Mode
- User Choice: Users can enable or disable the option.
- Location Enforced: Enforces location services on the device.
Support Message
- Short Support Message: IT admins can set a short message that will appear in the Mobile Guardian customised restriction pop-up.
- Long Support Message: IT admins can set a long message that will appear in the Mobile Guardian customised restriction pop-up.
Developer Settings
- Developer Settings: Allows admins to enable or disable developer settings. By default, it is allowed on the device.
Google Playstore Mode
- Playstore Mode Unspecified: Defaults to Whitelist.
- Whitelist: Only apps in the policy are available, and other apps will be uninstalled.
- Blacklist: All apps are available, and unwanted apps must be explicitly marked as blocked.
Please let us know if you found this helpful!
Thanks for reading! 🙂