Essentials MDM Support Center

Dedicated device policies – Launcher customization 
 New option on Policies tab – Dedicated device policies, on which default and custom policies list is displayed. In current version list allows to customize columns and open details of the policy.

You will then have to choose between editing the existing default policy or create a completely new one.

To create a new dedicated device policy, tap the +-sign to the left. When creating a new one, you will have to give it a name and set a Policy priority:

On the left side you will find several options available:
 

General settings

In the General settings you will find the following options:

1. Reinstall base agent (Yes/No)
2. Uninstall not compatible policy components automatically (Yes/No)
3. Mark as wiped on Base Agent uninstallation (Yes/No)
4. Enable remote access services (Yes/No)
5. Enable location services (Yes/No)
6. Report additional data about apps (app size, cache size, data size)
    (This option requires the Usage Access permission to be enabled)
7. Report all applications 
   1. Report all applications
   2. Report only managed applications
      1. Peak days
         
      2. Device Monitor sessions interval
         
      3. Peak time
         
      4. Device Monitor sessions interval
         
      5. Number of stored Device Monitor sessions
         1. 5-50
      6. Data reported in Device Monitor session (Android)
         
      7. Wipe on exceeded device inactivity (Yes/No)
      8. Marked as wiped on exceeded device inactivity (Yes/No)
      9. Time sync interval
         
      10. Sim change notify (for example if device was stolen) (Yes/No)
           SMS Gateway number (SIM change notification)
      11. Device limit per user (Numeric, 1-999.999)

Policy Components

Here you can add components to your policy. You can chose between application or configuration.
.

. 

Launcher/single app mode settings

When Launcher is selected, preview of the Launcher view on the device is displayed. Preview is automatically changed based on the selected settings.

Apps/web clips can be reordered on the device preview using drag & drop function.

Launcher settings are split into the four subtabs:

General Launcher settings

1. Wallpaper - possibility to set custom wallpaper
2. Start first application after reboot - if set, first app on the list will be launched automatically after reboot of the device
3. Inactivity timeout - time after which the device will be locked (options: Disabled, 30 seconds, 1 minute, 2 minutes, 5 minutes, 10 minutes)
4. App list theme - light or dark mode background of apps & web clip part
5. App list background transparency - allows to set transparency of the app list background (0%, 25%, 50%, 75%, 100%)
    

If Header settings are enabled - new area that can be displayed on the device, with options:

1. Icon - possibility to set custom icon on the header bar
2. Color - color of the header bar background (can be set directly with RGB values or picked up with the mouse click)
3. Transparency - allows to set transparency of the header (0%, 25%, 50%, 75%, 100%)

Custom settings bar

1. Settings bar position - allows to change position of the settings bar (top of the screen, below the header or bottom of the screen)
2. Settings bar transparency - allows to set transparency of the settings bar (0%, 25%, 50%, 75%, 100%)
3. Settings bar theme - available options: light or dark theme
4. Show device info button - optional button on the left side of the settings bar
   1. Optional device info button text - optional text displayed next to the device info icon on settings bar
   2. Show device info in separate view
       If set, device info fields will be shown on the separate page. 

In addition we can provide short description (max 64 chars) which will be displayed on that view and phone number.

When provided and device will have a sim card there will be button displayed that will invoke call to the provided phone number.

Call functionality is available since Android 9.0.  

1. Show settings button:
   1. Optional settings button text - optional text displayed next to the settings button on settings bar
   2. Show Bluetooth toggle - enables the Bluetooth connection
   3. Show WiFi toggle - enables the WiFi
   4. Show torch toggle - enables the torch
   5. Show restart option - allows to restart the device
   6. Show brightness slider - allows user to change the brightness on the device
   7. Show rotate toggle - possibility to rotate the view
   8. Show volume slider - allows user to change the volume on the device
   9. Show grid/list switch - possibility to switch the view between grid and list
   10. Show zoom toggle - possibility to zoom the view (both grid or list)

Launcher grid elements

We can select application shortcut or web clip.

When application shortcut will be selected we can provide:

1. Package name - when clicked, hints with all apps from the organization will be displayed.
2. Name - application name displayed on the device
3. Description - optional text displayed in the second line visible on the list view
4. Primary icon - icon displayed on the device in a normal view (not zoom)
5. Zoom-mode icon - optional icon displayed in zoom mode (if not provided, primary one will be displayed)  

1. When web clip will be selected, we can provide:
   1. URL - link to the web clip
   2. Name - name displayed on the device
   3. Description - optional text displayed in the second line visible on the list view
   4. Primary icon - icon displayed on the device in a normal view (not zoom)
   5. Zoom-mode icon - optional icon displayed in zoom mode (if not provided, primary one will be displayed)  

In order to change / remove already added app/web clip hover the app on the device preview, edit and delete icons will be shown.

In order to apply all the changes on the device, "Save" button need to be clicked. (Will appear on the left bottom part of the view when any change will be performed). 

1. With the Intent functionality we are able to open specific files via provided in uri application and also make a clickable icon:
   1. Activity – new activity will be launched
   2. Service – request for that a given application service can be started
   3. Send a broadcast - broadcast the given intent to all interested BroadcastReceivers. 

Generic KIOSK mode settings

1. Keyguard (Enabled/Disabled)
2. Volume change (Enabled/Disabled)
3. Long press power button (Enabled/Disabled)
4. System info on status bar (Enabled/Disabled) 
5. Home button (Enabled/Disabled)
6. Recent apps (Enabled/Disabled)
    (Not available if home button is disabled)
7. Notifications (Enabled/Disabled)
    (Not available if home button is disabled)

Default apps to open files

Here you have the option to choose which app to open files.

Security options

There are several security options to secure the devices in the dedicated device policy. You are also able to perform a search or filter on Android models.

1. Wipe policy:
   1. Data wipe on SIM card change (Yes/No)
   2. Wipe on no SIM card detection (Yes/No)
       (Data wipe on SIM card change must be enabled)
   3. Wipe memory card (Yes/No)
       (Data wipe on SIM card detection must be enabled)
   4. Wipe on root detection (Yes/No)
   5. Factory reset lock (Yes/No)
   6. Factory reset protection (FRP)
      

1. Network policy:
   1. Wi-Fi lock (Yes/No)
   2. Manual Wi-Fi configuration lock (Yes/No)
       (Wi-Fi lock must be enabled)
   3. Keep Wi-Fi on in sleep mode (Yes/No)
   4. Prevet Wi-Fi from being turned on (Yes/No)
   5. Bluetooth lock (Yes/No)
   6. Cellular data lock
      
   7. Cellular data lock in roaming
      
   8. Wi-Fi tethering lock (Yes/No)
   9. USB tethering lock (Yes/No)
   10. Block incoming MMS (Yes/No)
   11. Disable Network Settings Reset (Yes/No)
   12. Disable VPN settings (Yes/No)
   13. Block private DNS settings (Yes/No)
   14. Block incoming calls
        (Pattern will let you set patterns of blocked numbers, see examples in the console) 
   15. Block incoming SMS messages
        (Pattern will let you set patterns of blocked numbers, see examples in the console)
   16. Monitor list of managed Wi-Fi configurations (Yes/No)
   17. Disallow cellular 2G (Yes/No)
   18. Disallow Ultra-Wideband (UWB) (Yes/No)

1. Location policy:
   1. Android location lock
      

1. Hardware policy
   1. Camera lock (Yes/No)
   2. USB media player lock (Yes/No)
   3. Development mode lock (Yes/No)
   4. Task manager lock (Yes/No)
   5. NFC lock (Yes/No)
   6. Disallow outgoing beam using NFC (Yes/No)
   7. Storage card lock (Yes/No)
   8. Screen capture lock (Yes/No)
   9. USB file manager (Yes/No)
   10. Block multiwindow mode (Yes/No)
   11. Block safe mode (Yes/No)
   12. Block airplane mode (Yes/No)
   13. Prevent users from configuring credentials in the managed keystore
2. Encryption policy (Yes/No)
   1. Internal storage encryption (Yes/No)

1. Installer policy
   1. Application installer lock (Yes/No)
   2. Allow USB debugging (Yes/No)
   3. Unknown sources lock (Yes/No)
   4. Disable application control (Yes/No)
   5. Accounts creation using Google Play (Yes/No)

1. Application restrictions
   1. Application voice recording lock (Yes/No)
   2. Do not force Google Play Protect (Yes/No)
   3. Force automatic date and time (Yes/No)
   4. Disable accounts modification (Yes/No)
   5. Disable user accounts management (Yes/No)
   6. Disallow config default applications (Yes/No)

1. Application policy
   1. Device Owner application policy
      
   2. Device Owner runtime permission policy
      
   3. Application permissions exceptions
      
   4. The auto-update Managed Google Play apps policy settings
      
   5. Applications availability in the MGP store
      

Usage Monitor

1. Enable usage monitor services (Yes/No)
    The Android Usage agent monitors and reports user activity to the Essentials server, records outgoing and incoming voice calls, and gives insight into outgoing and incoming text and MMS messages. Essentials Usage Monitor installation is like Base Agent installation.
   1. Report device data after restart of the device (Yes/No)
   2. Package data settings
      Report data traffic using Wi-Fi
      
2. Extended reporting settings
   1. Report device state (Yes/No)
   2. Report screens unlock/lock time (Yes/No)
   3. Report application usage (Yes/No)
      Report extended parameter
      

Backup settings

1. Backup synchronization settings
    Backup items – sets the backup items that will be included in policy (Supported only backup of the contacts)
   1. Backup interval
      
2. Business contact synchronization
   1. Basic synchronization type
      
   2. Contacts synchronization of the additional groups
      This will let you add users from the user groups in the system
      
   3. Business contacts sync interval
      
   4. Default mobile number of business contacts
      

Agent settings

Here you are able to set a handful of values to be displayed in the agent.

1. Organization name displayed on the device
   1. This makes you able to configure the organizations name on the device, i.e., Techstep
      
   2. Select optional field
      
2. Show additional filed on agent´s main panel (Yes/No)
    (Available for Android and macOS devices)
   1. Value of the additional field on agent´s main panel
      
   2. Device details fields in agent
       

Continuous parameter reporting and alerting

This will let the system report several parameters from the device, like Charger state, Battery level, Memory RAM Free, Battery voltage, Battery temperature, Battery condition and low battery level.

1. Parameter reporting
   
   1. Report only in peak
      
   2. Report all the time
      

Productivity tools

1. This makes you install two applications for productivity
   1. Enable Plug&Play (Yes/No)
       Plug & Play application offers effective way to establish connection between Bluetooth-enabled devices and an Android device, but also the ability to use a device's built-in camera as a scanner.

This app is added by default to the Managed Kiosk product.
You can edit the configuration when activated