This guide outlines how IT administrators can configure Android Zero-Touch (AMA) and EMM policy settings within the Mobile Guardian Dashboard to enforce security standards across corporate-owned hardware.
Configuring Zero-Touch AMA Restrictions
- Log in to the Mobile Guardian Dashboard.
- Navigate to Profiles from the main menu.
- Select your target Configuration or Conditional profile and click the Edit (Pencil) icon.
- Go to the What tab, select Restrictions, and click the Android tab.
- Toggle your desired policy settings and click SAVE at the bottom of the screen.
Policy Application Scope:
- Legacy Settings: Applies globally to all enrolled Android assets.
- Zero-Touch (AMA) Settings: Enforces policy controls exclusively on Zero-Touch (AMA) enrolled devices. Applied policies take effect during the next routine device sync.
Android Zero-Touch & EMM Policy Controls
- App Management
- Block Uninstall Application: Prevents employees from removing managed applications.
- Block Install Unknown APK: Blocks app installations from unverified, non-market sources.
- Force Google Play Protect: Enforces continuous background app scanning and safety verification.
- Audio & Microphone Policies
- Microphone Access: Set to User Choice or enforce Microphone Access Enforced across managed hardware.
- Connectivity & Network Configuration
- Network Security: Block service provider cell broadcasts, lock mobile network configurations, block network resets, and prevent Bluetooth modifications.
- System Integrity: Enforce auto time/time zone settings, block system account additions/updates, and disable hard factory resetting.
- Device Connectivity & Data Controls
- Media & Screen Security: Prevent screen captures, recordings, and screen sharing in managed apps.
- Peripheral & Data Transfers: Block USB file transfers, physical media mounting (SD cards), and NFC beam sharing.
- Wireless & Telephony: Block mobile hotspots/tethering, restrict cellular roaming data, block outgoing calls (except emergency services), and disable SMS text messaging.
- Google Play Store Modes
- Developer Options: Toggle administrative access to OS developer settings (enabled by default).
- Whitelist Mode (Default): Only explicit policy-approved apps are available; all non-approved apps are uninstalled automatically.
- Blacklist Mode: All Play Store apps remain available except those explicitly designated as blocked by administration.
- Display, Location & Administrative Settings
- Screen Lock & Support Messages: Configure custom lock screen messaging along with short or long administrative support messages for restriction pop-ups.
- Location Services: Toggle between User Choice or Location Enforced.