Android management in China – what are your options?

After I published the article regarding the enrollment of Android devices in closed networks, the hottest question was how to apply it for China. The answer is as usual “it depends”. If you want to know more – read on! What’s the problem?What options are available?What is the optimal approach? What’s the problem? Problem is...

Android Q Enterprise Features for EMM Admin

This is a brief analysis on the upcoming Android Enterprise Features in Android Q. Read the full notes here. Google has a habit of silently updating those documents, so I expect to update this post once subsequent iterations of Beta are released. The below is my sole opinion, and I welcome hearing yours. NB: it...

[iOS vs Android] OS and Application Updates

I frequently get this question from customers and partners: "How can I control Application and OS Updates in iOS and Android". So I'll drop a note here. Update management includes: Configuring the behaviour of OS upgrades (major), patches, public apps (via App/Play Store, VPP) and private apps (via App/Play Store or directly via EMM)Scheduling updates to happen (or...

Google Play Managed iFrame in Workspace ONE UEM (AirWatch) – App Collections

In two previous posts dedicated to the Managed Google Play iFrame we have covered Private Apps and Web Apps. The last feature of the iFrame interface is called Collections and allows you to organize the Work Play Store app layout, as well as shoot yourself in the foot a few times... As usual, the Collections...

Google Play Managed iFrame in Workspace ONE UEM (AirWatch) – Web Apps

In the previous post I have covered adding Private apps via the Google Play Managed iFrame for Android Enterprise. This time let's deal with the Web Apps (links, web clips). Honestly, it is much quicker to add a web application to WorkspaceONE Identity Manager and expose via the WS1 Intelligent Hub, but if you really...

Google Play Managed iFrame in Workspace ONE UEM (AirWatch) – Private Apps

In this post I will show a simple way to manage Private (Internal) Android Applications in Managed Play Store with WorkspaceONE UEM (AirWatch) using the Play Store Managed iFrame. This is important since it's basically the only way to push Private apps to Android Enterprise Work Profile or COPE devices. Android Enterprise is awesome, but...

Securing work contacts while keeping caller ID 02: Android

I had a week of customer meetings, each (literally!) asking the same question: "How can I prevent WhatsApp from grabbing the corporate contacts on my device?" In this series of posts we will explore the options of deploying corporate email/contacts/calendars with the goal of maximal work/personal contact separation, while trying to minimally impair the user...

Securing work contacts while keeping caller ID 01: Android vs iOS

I had a week of customer meetings, each (literally!) asking the same question: "How can I prevent WhatsApp from grabbing the corporate contacts on my device?" This happens more often than you think – the infamous GetContact collected over 3.5B contacts in just a few months, all of which were officially available for sale! With GDRP...

Does Android P private DNS really contribute to privacy? Or to Enterprise control?

Private DNS is a new feature in Android P, which allows you to globally override the DNS settings (received from your carrier, hotspot provider etc.). This means that the said carrier's or provider's DNS servers will not be able to log your browsing habits. Read more here (Android Police). This looks like privacy, but isn't...

Lockdown in Android Enterprise (Android P DP1)

I’ve previously covered the BYOD experience in Android P, now let’s delve into corporate-owned scenarios. My attempt to cover everything in a single long post had failed, so I’m splitting this into a series. Today we’re covering lockdown. Retrospective Early Android ideology assumed that device lockdown should be impossible. After all, here’s how ransomware works...