This guide outlines how IT administrators can configure Android Enterprise Mobility Management (EMM) restriction controls within the Mobile Guardian Dashboard to manage enterprise-owned hardware.
Accessing Android EMM Controls
- Select Profiles from the left-hand navigation panel.
- Click the Edit (Pencil) icon under the Actions column for your target profile.
- Go to the What tab, select Restrictions, and click the Android tab.
Policy Application Scope:
- Legacy Settings: Applies globally to all enrolled Android assets.
- EMM Settings: Enforces policy controls exclusively on EMM-enrolled corporate hardware.
Select your desired restriction parameters and click SAVE. Changes take effect during the next routine device sync cycle.
EMM Policy Control Overview
- Application Management
- Default Browser Selection: Configure default application handlers for opening web links.
- App Installation Restrictions: Block users from installing new apps, sideloading unknown APK files, or uninstalling/modifying managed software.
- Google Play Protect: Enforce mandatory app verification across managed hardware.
- Audio & Media Restrictions
- Volume Controls: Mute managed devices, lock audio volume controls, or block unmuting of system microphones.
- System & Connectivity Policies
- Network Security: Block cell broadcasts, restrict mobile network modifications, prevent network resets, and lock Bluetooth state settings.
- Account & Device Safeguards: Disable system account modifications, block custom accessibility services, enforce auto time zones, and restrict factory resetting.
- Hardware & Peripherals Management
- Data & Hardware Locks: Restrict camera usage in managed applications, block screen recordings and screenshots, and prevent file transfers via USB or physical external media.
- Wireless Communications: Disable tethering/portable hotspots, NFC beam transfers, cellular data roaming, and airplane mode toggling.
- Telephony Restrictions: Block outgoing phone calls (excluding emergency services) and disable SMS text messaging.
- Screen Lock, Biometrics & Location
- Authentication Controls: Disable keyguard secure camera access, biometric fingerprint unlock, and Smart Lock features.
- Notifications & Screen Displays: Enforce unredacted or secure notification blocks, set Wi-Fi sleep timeouts, and configure custom Lock Screen messages.
- Location Services & Support Messaging: Enforce specific location service modes and set custom short/long support messages in administrative restriction pop-ups.