The Android Zero-Touch solution is designed for school-owned devices, giving IT administrators control over an extended range of settings and policy controls.
Follow the steps below to view and configure these controls:
- Access your school’s Mobile Guardian dashboard.
- From the main menu, go to the Profile Section.
- Choose the profile you want to configure (baseline or conditional).
- Click the edit icon next to the profile details.
Configure Restrictions:
- Go to the "What" tab and click on "Restrictions."
- Select the "ANDROID" tab to display all Android Legacy and Android EMM settings.
#Note:
- Legacy Settings apply to all Android devices.
- EMM Settings apply only to EMM-enrolled devices.
- Activate the necessary restrictions and click "SAVE" at the bottom.
The settings will apply when you next sync the devices.
How to Access Settings When "Disable Access to Settings" is Active
Below is a list of settings applicable to Zero-Touch enrolled devices along with brief descriptions. These settings are displayed on the dashboard and can be enabled or disabled as needed.
App Management
- Block Uninstall Application: Prevents users from uninstalling apps.
- Block Install Unknown APK: Prevents users from installing apps from unknown sources.
- Force Google Play Protect: Enables "Verify Apps" on devices.
Audio
On fully managed devices, this controls the use of the microphone.
- User Choice: Users can enable or disable the option.
- Microphone Access Enforced: Enforces microphone access on the device.
Connectivity Configuration
- Block Cell Broadcasts Configuration: Disables cell broadcasts sent by service providers.
- Block Modification of Mobile Network Settings: Prevents users from modifying mobile network settings.
- Block Resetting of All Network Settings: Prevents users from resetting all network settings.
- Block Bluetooth Connection Configuration: Prevents users from modifying Bluetooth connections.
- Block Modifying Auto Time Zones and Time: Enforces system auto time settings.
- Block Account Modification: Prevents users from adding or modifying accounts.
- Block Factory Reset: Prevents users from factory resetting the device.
Device Connectivity Options
- Block Screenshots and Recordings: Blocks users from taking screenshots or screen sharing using managed apps.
- Block Access to Tethering and Portable Hotspots: Prevents users from using their devices as a portable hotspot.
- Block Outgoing Phone Calls (Excluding Emergency Calls): Blocks outgoing calls except for emergency calls.
- Block Send and Receive SMS Messages: Configures if the device can send and receive SMS messages.
- Block Cellular Data While Roaming: Configures if the device allows cellular data while roaming.
- Block Mounting Physical External Media: Blocks users from mounting external media.
- Block NFC Beam: Blocks users from sharing data via NFC beam.
- Block File Transfer via USB: Blocks users from transferring files over USB.
Screen Lock
- Lock Screen Message: Allows IT admins to set a custom message displayed on the lock screen without unlocking the device.
Location Services Mode
- User Choice: Users can enable or disable the option.
- Location Enforced: Enforces location services on the device.
Support Message
- Short Support Message: IT admins can set a short message that will appear in the Mobile Guardian customized restriction pop-up.
- Long Support Message: IT admins can set a long message that will appear in Mobile Guardian customized restriction pop-up.
Developer Settings
- Developer Settings: Allows admins to enable or disable developer settings. By default, it is allowed on the device.
Google Playstore Mode
- Playstore Mode Unspecified: Defaults to Whitelist.
- Whitelist: Only apps in the policy are available, and other apps will be uninstalled.
- Blacklist: All apps are available, and unwanted apps must be explicitly marked as blocked.
Please let us know if you found this helpful!
Thanks for reading! 🙂