The Android EMM solution set is intended for school-owned devices. Managed features give IT admins control over an extended range of device settings and additional policy controls.
To view and configure these controls, follow the instructions below:
1. Log in to your school dashboard
2. Navigate to the Profile Section on the Main menu
3. Select your desired profile (if you have set up a conditional profile or use the baseline) by clicking the edit icon on the right of the profile details.
4. Select the What tab and click on Restrictions.
5. Select the ANDROID tab and it should display all Android Legacy and Android EMM settings
Please Note: The LEGACY SETTINGS apply to all Android devices while the EMM SETTINGS apply to only EMM enrolled devices. You can activate any of the restrictions and click on the SAVE button at the bottom of the screen. The settings will be applied when you next perform device sync.
Below displays, the list of settings applicable to EMM-managed devices alongside a brief description. These settings are displayed on the dashboard and can be enabled or disabled.
Ensure you are aware of the relevant settings and their application.
|Open all Weblinks in the Mobile Guardian application||
Allows IT admins the ability to choose which browser app automatically opens all web links
|Block application management||Allows IT admin the ability to prevent the user from uninstalling or otherwise modifying managed apps through settings|
|Block uninstall application||Allows IT admins the ability to prevent the user from uninstalling apps|
|Block install application||Allows IT admins the ability to prevent the user from installing apps|
|Block install unknown apk||Allows IT admins the ability to prevent the user from installing apk files|
|Force Google Play Protect
Allows IT admins the ability to enable Verify Apps on devices
Mute managed device
Allows IT admins the ability to silently control device audio features, including muting the device, preventing users from adjusting volume settings, and preventing users from unmuting the device microphone.
Prevent user from modifying device volume settings
Prevent the user from unmuting the device microphone
|Block cell broadcasts configuration||Allows IT admins the ability to disable cell broadcasts sent by service providers|
|Block modification of mobile network settings||Allows IT admins the ability to prevent users from modifying mobile network settings in Settings|
|Block resetting of all network settings||Allows IT admins the ability to prevent users from resetting all network settings in Settings|
|Block Bluetooth connection configuration||Allows IT admins the ability to prevent users from configuring or modifying existing Bluetooth connections|
|Block modifying auto time zones and time||Allows IT admins the ability to enforce system auto time preventing the user from setting the date and time of the device.|
Block account modification
Allows IT admins the ability to prevent users from adding or modifying accounts
Block factory reset
Allows IT admins the ability to prevent users from factory resetting their device from Settings.
Block custom accessibility service
Allows IT admins the ability to control what accessibility services can be enabled on users' devices
Device Connectivity Options
|Block use of device cameras by managed apps||Allows IT admins the ability to disable the use of device camera managed by apps|
|Block screenshots and recordings||Allows IT admins the ability to block users from taking screenshots when using managed apps. This includes block screen sharing apps and similar apps (such as Google Assistant) that leverage the system screenshots capabilities.|
|Block access to tethering and portable hotspots||Allows IT admins the ability to prevent users from using their devices as a portable hotspot by tethering|
|Block outgoing phone calls excluding emergency calls||Allows IT admins the ability to block users from making outgoing calls excepts emergency calls|
|Block send and receive SMS messages||Allows IT admins the ability to configure whether the device can send and receive SMS messages|
|Block cellular data while roaming||Allows IT admins the ability to configure if the device permits cellular data while roaming|
|Block mounting physical external media||Allows IT admins the ability to block users from mounting physical external media via policy|
|Block NFC beam||Allows IT admins the ability to block users from sharing data from their devices using NFC beam via policy|
|Block file transfer via USB||Allows IT admins the ability to block users from transferring files over USB via policy|
|Block airplane mode||Allows IT admins the ability to block the user from enabling airplane mode|
|Disable all Keyguard features||Allows IT admins the ability to control advanced device keyguard (lock screen) features.|
|Disable secure camera|
|Disable secure notifications|
|Disable un-redacted notifications|
|Block smart lock management|
|Lock screen message||Allows IT admins the ability to a custom message that's always displayed on the device lock screen, and does not require device unlock to be viewed.|
|Location Service Mode
- Sensors only
- Battery saving
- High Accuracy
|Allows IT admins the ability to enforce a given location-sharing setting on a managed device. This feature can ensure, for example, that corporate apps always have access to high-accuracy location data, or that users don't consume extra battery by restricting location settings to battery-saving mode.|
WiFi Sleep Policy
|Allows IT admins the ability to set the WiFi timeout to default, only while plugged in, or never|
|Short Support Message||IT admins can set a short message that will appear in the mobile Guardian customized restriction pop-up|
|Long Support Message||IT admins can set a long message that will appear in mobile Guardian customized restriction pop-up|
Please let us know if you found this helpful!
Thanks for reading :)