Description of System Settings (Android Management)
The description of each system setting is given in the table below:
| System Settings | Descriptions |
|---|---|
| Device Functionality | |
| Unknown Sources | Allow or deny the Unknown Sources feature on the device. |
| System Update Policy | Admin can control the system updates by selecting an option from the below: Automatic- Installs system updates as soon as they become available without user interaction. Windowed – Installs system updates during a daily maintenance window without human intervention. Postpone – Postpones the installation of system updates for 30 days. After 30 days period, the system prompts the device user to install the update. |
| Windows System Update Start Time | The System update will start at the specified time. Note: This option is enabled only when the Windowed System Update Policy is selected. |
| Windows System Update End Time | The System update will end at the specified time. Note: This option is enabled only when the Windowed System Update Policy is selected. |
| System Update Freeze Periods | Set a freeze period (in HH:MM) for the devices. If the device time is within the freeze period, over-the-air system updates are blocked and postponed during this period. Note: The device must run Android version Pie or later for this setting to work. |
| Disable Screen Capture | Restricts the user from capturing the devices’ screen. |
| Disable Safe Mode | Restricts the user from rebooting the device into safe boot mode. |
| Disable Factory Reset | Restricts the user from factory resetting the device using devices’ Settings option . Admin can configure an account for Factory Reset Protection. |
| Google EmailId's for FRP | Enter the Gmail ID. |
| Disable Volume Control | Restricts the user from adjusting the volume control. |
| Disable Configuration of Credentials | Restricts the user from configuring the credentials. |
| Disable Modification of Accounts | Restricts the user from adding or removing the accounts. |
| Disable Account Management Type | Prevents users from adding accounts with management types like Samsung Account, Exchange, Google, Personal (IMAP), and Personal (POP3). Supported on Agent Version > 27.34.00 Once you enable this checkbox, Select Account Management Types to Disable from the options available |
| Disable Outgoing Call | Restricts the user from making phone calls from the device. |
| Disable SMS | Restricts the user from sending/receiving SMS. |
| Disable Microphone | Restricts the user from adjusting the microphone volume. |
| Disable Adding User | Restricts the user from adding new users. |
| Disable Removing User | Restricts the user from removing the users. |
| Disable Outgoing Beam | Restricts the user from using NFC to beam out data from applications. |
| Disable Wallpaper | Restricts the user from setting a wallpaper. Note: The device must run Android version 7.0 or later for this feature to work. |
| Stay On while Plugged in to | Use this option to keep the device screen On when the device is plugged into any of the following options: AC Charger USB Charger Wireless Charger |
| Disable Mounting Physical Media | Restricts the user from mounting physical external media. |
| Disable Camera | Restricts the user from using the Camera on the device. |
| Enable Auto Time | Restricts the user from setting the date and time of the device. |
| Disable Keyguard | Disables device's keyguard. |
| Enable Stay on Plugged Mode | Keeps the device screen On when the device is plugged into the charger. Note: Clear Device Maximum Time to Lock option under Configure Password Policy so that the device doesn't lock itself while it stays On. |
| Disable Creating Windows | Disables toast messages, phone calling activities, system alerts, system errors, and system overlays on the device. |
| Device Owner Information | Set a custom lock screen message that gets displayed on the device lock screen. |
| Skip First Use Hints | Allow or restrict the user from skipping the user tutorial and other introductory hints on application start-up. |
| Enable Common Criteria (CC) Mode | Use this control to enable services to bring the device into the Common Criteria-evaluated configuration, called CC Mode. |
| Sync and Storage | |
| USB Debugging | Allow or restrict the USB Debugging feature from Developer Options on the device. |
| Disable USB File Transfer | Restricts the user from transferring the files using USB. |
| Application | |
| Default Application Permission | Allow or deny the application permission on the devices. Select the desired permission: Prompt Grant Deny |
| Disable App Control | Restricts the user from modifying the applications using the devices’ Settings option. |
| Disable Apps Installation | Restricts the user from installing applications on the device. |
| Disable Apps Uninstallation | Restricts the user from uninstalling applications on the device. |
| Enable All System Apps | Allow accessing of all System Apps on the devices. |
| Enable App Verification | Enforces app verification on the device. |
| Play Store Mode | Select an option from the following: Unspecified - Default to allowlist. Allowlist - The apps that are added to the Application Policy are available for the users. Other apps will be automatically uninstalled from the device. Blocklist - Any apps that should not be available to the users, have to be added under Uninstall Application in Application Policy. |
| Location Services | |
| Disable Location Sharing | Restrict the user from turning on the location sharing. |
| Location Mode | Select an appropriate option for location sharing mode: None High accuracy Sensors only Battery saving Off |
| Network | |
| Disable Configuration of Bluetooth | Restricts the user from configuring the Bluetooth on the device. |
| Disable Configuration of Mobile Networks | Restricts the user from configuring the mobile networks. |
| Disable Configuration of Tethering | Restricts the user from configuring tethering and portable Hotspot. |
| Disable Configuration of VPN | Restricts the user from configuring VPN. |
| Disable Configuration of Wi-Fi | Restricts the user from configuring the Wi-Fi. |
| Disable Data Roaming | Restricts the user from using Mobile data on roaming. Note: The device must run Android version7.0 or later for this setting to work. |
| Disable Network Reset | Restricts the user from resetting the network options from devices’ Settings. Note: The device must run Android version6.0 or later for this setting to work. |
| Disable Bluetooth Contact Sharing | Restricts the user from sharing the contacts through Bluetooth. |
| Disable Configuration of Cell Broadcast | Restricts the user from configuring cell broadcast. |
| Keyguard Management | |
| Disable All Keyguard features | Restricts the user from customizing keyguard features on a device. |
| Disable Secure Camera | Restrict the user from using the camera app on the lock screen of a device. |
| Disable All Notifications | Disable all notifications on the lock screen of a device. |
| Disable Unredacted Notifications | Disable unredacted notifications on the lock screen of a device. |
| Disable Trust Agents | Disable trust agents on the lock screen of a device. |
| Disable Fingerprint Unlock | Disable fingerprint sensor on the lock screen of a device. |
| Disable Remote Input | Restrict text entry into the notifications on secure keyguard screen. |
| Disable Face Authentication | Disable face authentication on the lock screen of a device |
| Disable Iris Authentication | Disable iris authentication on the lock screen of a device. |
| Disable All Biometric Authentication | Disable all biometric authentication on the lock screen of a device. |
| Permitted Input Methods | |
| Package Name | Allow specific external keyboard apps that can be used on the device. |
| Permitted Accessibility Services | |
| Package Name | Allow specific apps that are accessible on the device. |
| Kiosk Management | Lockdown the devices with a single app or multiple apps. The following advanced settings can be configured on a device for both single or multiple app mode: Power Button Actions - Allow or block the usage of long press of the Power button in kiosk mode. System Error Warnings - Allow or block system error dialogs for crashed or unresponsive apps in kiosk mode. System Navigation - Allow or block system navigation features (Home/ Overview/ Back) in kiosk mode. Status Bar - Allow or block system info and notifications in kiosk mode. Device Settings - Allow or block the Settings app in kiosk mode. Note: The device must run Android version Pie or later for this setting to work. |
| Persistent Preferred Activity Management | Add an app as the default intent handler. |
| Delegated Certificate Management | |
| Set SureMDM Agent as certificate Installer | Silently install certificates on Android devices using SureMDM Agent. Note: The device must run SureMDM Agent v19.92 or later for this setting to work. |
| Delegate Certificate Installer to Other apps | Silently install certificates on Android devices using third-party apps. |