黑料海角91入口

Admins can use 黑料海角91入口 to remotely enroll, track, and manage Android mobile devices. These devices can be company owned or personal devices. After you enroll a device in 黑料海角91入口鈥檚 Android Enterprise Mobility Management (EMM), you can keep company resources, data, and apps secure.

Prerequisites:

• These types of Android devices are supported:
  • Android 5.1 (Lollipop) and later for employee-owned, personal devices.
  • Android 8.0 (Oreo) and later for company-owned, personally enabled devices used for work and personal use.
• Your enterprise is registered with 黑料海角91入口 Android EMM. See听Set Up Android EMM to learn more.
• End-user network connectivity must be available to add devices.
• Connectivity to Google services is also required. See Google鈥檚 support documentation;听 to learn more.

Considerations:

• Android devices should be encrypted before proceeding with the enrollment process. If devices aren't encrypted, there may be additional steps to complete the enrollment process.

Determining Enrollment Type

After you register your enterprise, choose the appropriate EMM enrollment method for each type of device. 黑料海角91入口 currently supports these ownership and enrollment types: 

• Company-owned devices听- The Admin or the end user can set up company-owned devices according to how they will be used. Organizations can also enforce device-wide policies (for example, configure WiFi settings, block USB file transfers) and restrictions that apply only to a device's personal data like disallowing certain apps.
  • Admin Enrolled听- You can enable and enroll these types of company-owned devices in the 黑料海角91入口 Admin Portal:听
    • Work Profile - The end user can access company data, apps, and policies that are stored in the work profile, which is a separate encrypted container on the device. The work profile keeps personal data separate and safe from corporate data on these mixed use devices. 
    • Fully Managed - The device is used exclusively for work.
    • Dedicated - This subset of fully managed devices is used only for simple workflows. The devices are often used for a kiosk and can perform  tasks like printing a ticket or managing inventory.
  • User Enrolled - The Admin enables user enrollment of a corporate device. The end user then enrolls the device via the 黑料海角91入口 User Portal.
• Personal devices听- Personal devices are owned by the employee. The Admin enables user enrollment of a device owned by an employee, and the user enrolls the device via the User Portal. An employee's org has full management control of the apps, data, and settings in the device's work profile, but has no visibility or access to the device's personal profile. This distinct separation gives enterprises control over corporate data and security without compromising employee privacy.

Managing Enrollment Tokens

Before adding Android devices to your EMM instance, you have to create enrollment tokens that will be used to enroll those devices.

Adding Enrollment Tokens

To create a new enrollment token:

1. Log in to the .
2. Go to DEVICE MANAGEMENT > MDM, then select the Google tab.
3. Under Admin Android Configuration, select the enrollment type and click Create Enrollment Token.
   
4. In the Create Enrollment Token editor, configure the following:
   
   • Name: Assign a name to the token so that it is identifiable to you.
   • Policy: Pre-filled based on the enrollment type selected previously.
   • Token Use: Choose whether the token will be Single-Use (individual) or Multi-Use (batch).
   • Token Expiration: Choose the duration for which the token will be valid. The default is 1 Hour. If Custom, configure the following:
     • Expires in: Enter a value that represents the length of time the enrollment token will be valid, from 1 to 10,000.
     • Duration: Select from Minutes, Hours, Days, or Years.
   • Use this token for zero-touch enrollment?: Select whether the enrollment token will be used to enroll zero-touch devices. To follow the steps for zero-touch enrollment, see Configure Zero-Touch Enrollment for Android to learn more.
   • Assign WiFi network on enrollment?: If this is not a zero-touch enrollment token, you can configure WiFi settings for the device.
     • Network Name (SSID): Enter a name or Service Set Identifier (SSID) for the WiFi network.
     • Hidden Network: Select this option to connect to a WiFi network that is not broadcasting its SSID.
     • Security Type: Determine the access protocol for the WiFi network. Some options will require a password. Choose one of these options:
       • None 鈥� If selected, the Password field does not appear.
       • WEP-PSK 鈥� The Wired Equivalent Privacy Pre-Shared Key (WEP-PSK) protocol authenticates users on a WiFi connection. These passphrases support only 40-bit (10-digit) or 104-bit (26-digit). Selecting this field makes the Password field appear.
       • WPA-PSK 鈥� The WiFi Protected Access Pre-Shared Key (WPA-PSK) protocol authenticates users on a WiFi connection. The keys used by WPA are 256-bit, making it more secure than WEP. This selection applies to versions that are WPA, WPA2, and WPA3. Selecting this field makes the Password field appear.
   • Password: If you selected WEP-PSK or WPA-PSK as the Security Type, enter the WiFi password.
5. Click Create Token.

Viewing or Removing Enrollment Tokens

The Enrollment Tokens table lists your enrollment tokens in a single location. View at-a-glance information about your existing enrollment tokens, such as Name, Enrollment Type, Expiration, and Token Use.

To delete an enrollment token, select the checkbox next to the token you want to delete, and click Delete.

Enrolling Devices

Enrolling a Company-Owned Android Device

If you are handing the device over to the employee, have the device handy because you鈥檒l scan a QR code and set the device up first. If you do not have access to the company-owned Android device, you can also email the Direct Link to the user to scan and install.

To enroll a company-owned Android device:

1. Log in to the .
2. Go to听DEVICE MANAGEMENT > Devices, then click the听Devices听迟补产.
3. 颁濒颈肠办听(+ Device), then select the听Android听迟补产.
4. Under Company-Owned Android Device, select the enrollment type for the company-owned device.
5. Click View QR Code to start the enrollment process. An Enroll Your Company-Owned Android Device screen appears.
6. On the new or factory-reset (if using an existing company device) device, tap the screen six times in the same spot to trigger a prompt to scan the QR code.
7. Scan the QR code in the Admin Portal with the company-owned device. If QR scanning is not possible, manually enter the enrollment token to proceed.
   
8. On the mobile device, tap ACCEPT & CONTINUE and follow the on-screen instructions to create a work profile.

9. After the device updates and registers the profile, the work profile appears. This action might take a few minutes.
   
10. Verify that the device appears in the Admin Portal by going to听DEVICE MANAGEMENT > Devices, clicking the听Devices听tab, and checking the device鈥檚 status:
    • Active - The device is enrolled and is under 黑料海角91入口 management.
    • Inactive - The device is not currently reporting or was manually disabled.

11. Verify that the device was enrolled in EMM:
    1. In the Devices tab, select the device that you just enrolled.
    2. Select the EMM tab to view enrollment details.
       
12. (Optional) Bind the device to a device group by selecting the听Device Groups听tab, selecting the checkbox next to an existing group, and clicking听save device. Device groups help you pool together devices for policy enforcement and user account provisioning. See听Get Started: Device Groups to learn more.
13. (Optional) To enforce additional device security, create a policy in the听Policies听tab and apply it to your devices. See听Configure an Android Passcode Policy听补苍诲听Create an Android Runtime Permissions Policy to learn more.听Additional Android policies can control Location Services, VPN Restrictions,听Application-based Restrictions, Bluetooth Restrictions, Device Restrictions,听 Account Restrictions, and more. See听Configure Settings for Android Policies to learn more.
14. Click Save Device if any configuration changes were made.
15. Deliver the enrolled device to the user.

Enrolling a Personal Android Device

As the Admin, you have to enable personal device enrollment before an employee can enroll a personal Android device. Users should be in a private, secure environment before they scan the QR code.

To enable a personal Android device:

1. Log in to the .
2. Go to听DEVICE MANAGEMENT > Devices, then click the听Devices听迟补产.
3. Click听(+ Device), then select the听Android听迟补产.

4. In the New Device panel, enable enrollment for personal devices by going to User Android Configuration and selecting Allow users to enroll personal mobile devices and access Enroll Your Android Device in the User Portal.
5. Click Select the Device Group to choose a device group where this device will automatically be enrolled.

6. Click save.
7. After you enable a personal Android device to be able to access company data, instruct the user to follow the instructions in Users: Enroll a Personal Android Device to scan the QR code and enroll the device. 
8. After the user finishes Step 7, verify that the device was enrolled:
   1. Go to DEVICE MANAGEMENT > Devices.
   2. Click the听Devices听tab, then select the Android device.
   3. Select the EMM tab and check that the device is enrolled.
9. (Optional) Apply a policy to provide additional device security:
   • Passcode听- Enforce a device passcode for the device itself, and a passcode to access corporate applications and data within the work profile. SeeCreate an Android Passcode Policy to learn more.
   • Runtime Permissions听- Set a default response to runtime permission requests that are made by Android work apps. See听Create an Android Runtime Permissions Polic to learn more.
   • Custom Payload听- Control the behavior of a managed device and the apps installed on it by providing JSON content to create a custom policy. See听Create an Android Custom Payload Policy to learn more.听
   • Additional Android policies can control Location Services, VPN Restrictions, Application-based Restrictions, Bluetooth Restrictions, Device Restrictions, Account Restrictions, WiFi Restrictions, Battery Mode, and more.听See听Configure Settings for Android Policies to learn more.

Managing Devices

You can view details about each Android device, and view which device groups, users, apps, and policies are applied to the device.

To manage Android devices:

1. Log in to the .
2. Go to DEVICE MANAGEMENT > Devices.
3. Click the听Devices听tab and review the list of Android devices. You can filter how device info is displayed and perform additional actions:
   1. Click the听Operating System听column to reorder the devices by OS type or click the horizontal three line filter icon next to the search bar听and click听Android听> Apply to only view Android devices.
   2. After you select at least one device, click Actions to enable MFA or System Insights on multiple devices.
   3. You can鈥檛 remove a device鈥檚 status and name from the Devices list, but you can customize the other columns to show only the information you want to see. For example, instead of showing Last Contact, click the columns down arrow and choose Serial Number or another column name. You can select up to eight columns.
4. Select a device and click Insights to view more info, such as OS version, serial number, model, and storage usage.听
5. (Optional) Bind a device to a device group:
   1. Select a device, then select the Device Groups tab.
   2. Bind the device to a device group by selecting the checkbox next to an existing group. If you have not yet created a device group, see听Getting Started: Device Groups to learn more.
   3. Click Save Device.
6. (Optional) Add a security policy to a device to make it more secure by selecting听the听Policies听tab and assigning a policy to the device. If you have not created Android policies yet, see听Configure Settings for Android Policies to learn more.
7. (Optional) If needed, you can remotely execute these management commands from the Actions menu of a device by selecting the device in the Devices tab:
   
   • Lock Device - Click Lock Device to remotely lock a lost Android device, then click Yes, Lock. For devices enrolled with a work profile, the work profile passcode is locked and the container will remain locked until the end user enters the Work Profile passcode.
   • Reset Passcode - Click Reset Passcode to create a new passcode, which must have a minimum of 8 alphanumeric characters and include at least one special character. You must enter the new passcode, then click Save. For devices enrolled with a work profile, the passcode that is reset is the work profile passcode.
   • Restart Device - Click Restart to immediately restart this Android device. Any unsaved work on the device will be lost.
   • Erase Device or Remove Work Profile - Depending on the type of device, one of these buttons is visible:
     • Erase Device - Click Erase to permanently remove all data from this corporate-owned device. The device will be reset to factory settings and you鈥檒l no longer manage the device. If you鈥檙e troubleshooting an issue, erase the device only after trying other solutions. To manage this device in the future, the end user must re-enroll the device and enter pre-defined security information.
     • Remove Work Profile - Click Remove to permanently delete the work profile on a personal Android device. This deletes all company data, apps, and policies in the work profile. To use this personal device to access company information in the future, you鈥檒l need to re-enroll the device. 

鈥嬧赌嬧赌嬧赌嬧赌嬧赌嬧赌�