Description of System Settings (Android Management)

The description of each system setting is given in the table below:

System Settings	Descriptions
Device Functionality
Unknown Sources	Allow or deny the Unknown Sources feature on the device.
System Update Policy	Admin can control the system updates by selecting an option from the below: Automatic- Installs system updates as soon as they become available without user interaction. Windowed – Installs system updates during a daily maintenance window without human intervention. Postpone – Postpones the installation of system updates for 30 days. After 30 days period, the system prompts the device user to install the update.
Windows System Update Start Time	The System update will start at the specified time. Note: This option is enabled only when the Windowed System Update Policy is selected.
Windows System Update End Time	The System update will end at the specified time. Note: This option is enabled only when the Windowed System Update Policy is selected.
System Update Freeze Periods	Set a freeze period (in HH:MM) for the devices. If the device time is within the freeze period, over-the-air system updates are blocked and postponed during this period. Note: The device must run Android version Pie or later for this setting to work.
Disable Screen Capture	Restricts the user from capturing the devices’ screen.
Disable Safe Mode	Restricts the user from rebooting the device into safe boot mode.
Disable Factory Reset	Restricts the user from factory resetting the device using devices’ Settings option. Admin can configure an account for Factory Reset Protection.
Google EmailId's for FRP	Enter the Gmail ID.
Disable Volume Control	Restricts the user from adjusting the volume control.
Disable Configuration of Credentials	Restricts the user from configuring the credentials.
Disable Modification of Accounts	Restricts the user from adding or removing the accounts.
Disable Outgoing Call	Restricts the user from making phone calls from the device.
Disable SMS	Restricts the user from sending/receiving SMS.
Disable Microphone	Restricts the user from adjusting the microphone volume.
Disable Adding User	Restricts the user from adding new users.
Disable Removing User	Restricts the user from removing the users.
Disable Outgoing Beam	Restricts the user from using NFC to beam out data from applications.
Disable Wallpaper	Restricts the user from setting a wallpaper. Note: The device must run Android version 7.0 or later for this feature to work.
Stay On while Plugged in to	Use this option to keep the device screen On when the device is plugged into any of the following options: AC Charger USB Charger Wireless Charger
Disable Mounting Physical Media	Restricts the user from mounting physical external media.
Disable Camera	Restricts the user from using the Camera on the device.
Enable Auto Time	Restricts the user from setting the date and time of the device.
Disable Keyguard	Disables device's keyguard.
Enable Stay on Plugged Mode	Keeps the device screen On when the device is plugged into the charger. Note: Clear Device Maximum Time to Lock option under Configure Password Policy so that the device doesn't lock itself while it stays On.
Disable Creating Windows	Disables toast messages, phone calling activities, system alerts, system errors, and system overlays on the device.
Device Owner Information	Set a custom lock screen message that gets displayed on the device lock screen.
Skip First Use Hints	Allow or restrict the user from skipping the user tutorial and other introductory hints on application start-up.
Sync and Storage
USB Debugging	Allow or restrict the USB Debugging feature from Developer Options on the device.
Disable USB File Transfer	Restricts the user from transferring the files using USB.
Application
Default Application Permission	Allow or deny the application permission on the devices. Select the desired permission: Prompt Grant Deny
Disable App Control	Restricts the user from modifying the applications using the devices’ Settings option.
Disable Apps Installation	Restricts the user from installing applications on the device.
Disable Apps Uninstallation	Restricts the user from uninstalling applications on the device.
Enable All System Apps	Allow accessing of all System Apps on the devices.
Enable App Verification	Enforces app verification on the device.
Play Store Mode	Select an option from the following: Unspecified - Default to allowlist. Allowlist - The apps that are added to the Application Policy are available for the users. Other apps will be automatically uninstalled from the device. Blocklist - Any apps that should not be available to the users, have to be added under Uninstall Application in Application Policy.
Location Services
Disable Location Sharing	Restrict the user from turning on the location sharing.
Location Mode	Select an appropriate option for location sharing mode: None High accuracy Sensors only Battery saving Off
Network
Disable Configuration of Bluetooth	Restricts the user from configuring the Bluetooth on the device.
Disable Configuration of Mobile Networks	Restricts the user from configuring the mobile networks.
Disable Configuration of Tethering	Restricts the user from configuring tethering and portable Hotspot.
Disable Configuration of VPN	Restricts the user from configuring VPN.
Disable Configuration of Wi-Fi	Restricts the user from configuring the Wi-Fi.
Disable Data Roaming	Restricts the user from using Mobile data on roaming. Note: The device must run Android version7.0 or later for this setting to work.
Disable Network Reset	Restricts the user from resetting the network options from devices’ Settings. Note: The device must run Android version6.0 or later for this setting to work.
Disable Bluetooth Contact Sharing	Restricts the user from sharing the contacts through Bluetooth.
Disable Configuration of Cell Broadcast	Restricts the user from configuring cell broadcast.
Keyguard Management
Disable All Keyguard features	Restricts the user from customizing keyguard features on a device.
Disable Secure Camera	Restrict the user from using the camera app on the lock screen of a device.
Disable All Notifications	Disable all notifications on the lock screen of a device.
Disable Unredacted Notifications	Disable unredacted notifications on the lock screen of a device.
Disable Trust Agents	Disable trust agents on the lock screen of a device.
Disable Fingerprint Unlock	Disable fingerprint sensor on the lock screen of a device.
Disable Remote Input	Restrict text entry into the notifications on secure keyguard screen.
Disable Face Authentication	Disable face authentication on the lock screen of a device
Disable Iris Authentication	Disable iris authentication on the lock screen of a device.
Disable All Biometric Authentication	Disable all biometric authentication on the lock screen of a device.
Permitted Input Methods
Package Name	Allow specific external keyboard apps that can be used on the device.
Permitted Accessibility Services
Package Name	Allow specific apps that are accessible on the device.
Kiosk Management	Lockdown the devices with a single app or multiple apps. The following advanced settings can be configured on a device for both single or multiple app mode: Power Button Actions - Allow or block the usage of long press of the Power button in kiosk mode. System Error Warnings - Allow or block system error dialogs for crashed or unresponsive apps in kiosk mode. System Navigation - Allow or block system navigation features (Home/ Overview/ Back) in kiosk mode. Status Bar - Allow or block system info and notifications in kiosk mode. Device Settings - Allow or block the Settings app in kiosk mode. Note: The device must run Android version Pie or later for this setting to work.
Persistent Preferred Activity Management	Add an app as the default intent handler.
Delegated Certificate Management
Set SureMDM Agent as certificate Installer	Silently install certificates on Android devices using SureMDM Agent. Note: The device must run SureMDM Agent v19.92 or later for this setting to work.
Delegate Certificate Installer to Other apps	Silently install certificates on Android devices using third-party apps.