Description of System Settings


The description of each system setting is given in the table below:

System Settings

Descriptions

Device Functionality


Unknown Sources

Allow or deny Unknown Sources feature on the device.

System Update Policy

Admin can control the system updates by selecting an option from the below:

  • Automatic- Installs system updates as soon as they become available without user interaction.
  • Windowed – Installs system updates during a daily maintenance window without human intervention.
  • Postpone – Postpones the installation of system updates for 30 days.  After 30 days period, the system prompts the device user to install the update.

Note: When set to Don't care and Automatic, the device will auto-update to the latest version when updates are available.

Windows System Update Start Time (0-1440 minutes)

System update will start at the specified time.

Note: This option can be enabled only when Windowed System Update Policy is selected.

Windows System Update End Time (0-1440 minutes)

System update will end at the specified time.

Note: This option can be enabled only when Windowed System Update Policy is selected.

Enable Kiosk Mode

Allows to lock the devices with only one or a few specific applications.

Kiosk Exit Password

Allows to use SureMDM Agent application in kiosk mode.

Disable Screen Capture

Restricts the user from capturing the devices’ screen.

Note: Remote control will work only when users disable the screen capture.  

Disable Safe Mode

Restricts the user from rebooting the device into safe boot mode.

Disable Factory Reset

Restricts the user from factory resetting the device from devices’ Settings option.  Admin can configure an account for Factory Reset Protection.

Google UserId's for FRP

Allows admin to configure a Google User ID for Factory Reset Protection (FRP).

To configure Google User ID for FRP, follow these steps:

a. Click Get UserID.

b. On next screen, click Execute.

c. Login with generic Google account.

    Copy the UserID and paste it in the Google User ID field.

Disable Volume Control

Restricts the user from adjusting the volume control.

Ringer Mode

Allow admins to set an option for the Ringer mode:

  • User Choice
  • Normal
  • Silent
  • Vibrate  

Disable Configuration of Credentials

Restricts the user from configuring the credentials.

Disable Modification of Accounts

Restricts the user from adding or removing the accounts.

Disable Outgoing Call

Restricts the user from making phone calls from the device.

Disable SMS

Restricts the user from sending / receiving SMS.

Disable Microphone

Restricts the user from adjusting the microphone volume.

Disable Adding User

Restricts the user from adding new users.

Disable Removing User

Restricts the user from removing the users.

Disable Outgoing Beam

Restricts the user from using NFC to beam out data from applications.

Disable Wallpaper

Restricts the user from setting wallpaper.

Note: The device must run Android version 7.0 or later for this setting to work.

Stay On while Plugged in to

Use this option to keep the device screen On when the device is plugged into any of the following options:

  • AC Charger
  • USB Charger
  • Wireless Charger  

Sync and Storage


USB Debugging

Allow or restrict the USB Debugging feature from Developer Options on the device.

Enable USB Mass Storage

Allow admins to enable USB mass storage on the device.

Disable USB File Transfer

Restricts the user from transferring the files using USB.

Enable Backup and Restore

Using this option admins can enable the backup and restore in the device. 

Application(s)


Default Application Permission

Allow or deny the application permission on the devices. Select the required permission:

  • Prompt
  • Grant
  • Deny

Disable App Control

Restricts the user from modifying the applications from devices’ Settings option.

Disable Apps Installation

Restricts the user from installing applications on the device.

Disable Apps Uninstallation

Restricts the user from uninstalling applications on the device.

Enable All System Apps

Allows to access all System Apps on the devices.

Enable AE specific configurations

Use this option to enable Android Enterprise configurations: App Auto-updates and Enable Apps Feedback Report. 

App Auto-updates

Admin can allow the auto update of apps installed on the device by selecting an option from the below:

  • User Choice - Allow device user to configure the app update policy.
  • Always - Enables auto-update
  • Wi-Fi- Enables auto-update only when the device is connected to Wi-Fi
  • Never - Disables auto-update

Maintenance Windows

Use this option to auto-update applications during the specified start and end time. 

App Access in Google Play Store

Specify the app access for the users that they can install on their device.

  • Allow All Apps - Allow all apps from Play Store 
  • Allow Approved Apps Only - Allow apps that are approved through Managed Google Play.
  • Allow Allowlist Apps Only - Allow apps that are added to the Application Policy.

Enable Apps Feedback Report

Allow the device to report application states to the EMM.

Location Services


Disable Location Sharing

Restricts the user from turning on the location sharing.

Network


Bluetooth

Use this option to enable or disable bluetooth on a device. 

Disable Configuration of Bluetooth

Restricts the user from configuring Bluetooth settings on the device.

Disable Configuration of Mobile Networks

Restricts the user from configuring the mobile networks.

Disable Configuration of Tethering

Restricts the user from configuring tethering and portable Hotspot.

Disable Configuration of VPN

Restricts the user from configuring VPN.

Disable Configuration of Wi-Fi

Restricts the user from configuring the Wi-Fi.

Enable AllowList Network 

Select this option to allow the users to connect to the allowed SSIDs.

Allowed SSIDs

Enter the allowed SSIDs in this field. 

Note: This option will be enabled only when users select the Enable AllowList Network option. 

Disable Data Roaming

Use this option to allow or Restrict the user from using Mobile data on roaming.

Note: The device must run Android version 7.0 or later for this setting to work.

Disable Network Reset

Restricts the user from resetting the network options from devices’ Settings.

Note: The device must run Android version 6.0 or later for this setting to work.


Wi-Fi

Use this option to enable or disable Wi-Fi on a device.

Transfer data via Bluetooth

Use this option to transfer data through Bluetooth

Note: The device must run SureMDM Agent version v27.08.13 or later for this feature to work.

Keyguard Management


Disable All Keyguard Features

Restricts the user from customizing keyguard features.

Disable Secure Camera

Restrict the user from using camera on the lock screen of a device.

Disable All Notifications

Disable all notifications on the lock screen of a device.

Disable Unredacted Notifications 

Disable unredacted notifications on the lock screen of a device.

Disable Trust Agents

Disable trust agents on the lock screen of a device.

Disable Fingerprint Unlock

Disable fingerprint sensor on the lock screen of a device.

Disable Face Authentication

Disable face authentication on the lock screen of a device.

Disable Iris Authentication

Disable iris authentication on the lock screen of a device.

Disable all Biometric Authentication 

Disable all biometric authentication on the lock screen of a device.

Work and Personal


Disable Cross Profile Copy Paste

Restricts the user from copying from profile clipboard and pasting in the related profiles.