Enroll a Fully Managed non-GMS Android device using ADB

When dealing with non-GMS Android devices (specialized rugged devices, devices in China) one big challenge is actually enrolling them, since the code that enrolls a Fully Managed device is not part of AOSP. As I mentioned in my post about China, only a few vendors took care of this. In this post we you will...

Android 11 COPE and the end of Internal apps

We know about the changes to Android 11 COPE, and how they affect the EMMs. One aspect that was slightly overlooked though, is what happens to Internal apps, which many organizations are still employing. We have recently released a KB, which caused a bit of panic between customers and colleagues. Let’s dive deeper and see...

Android management in China – what are your options?

After I published the article regarding the enrollment of Android devices in closed networks, the hottest question was how to apply it for China. The answer is as usual “it depends”. If you want to know more – read on! What’s the problem?What options are available?What is the optimal approach? What’s the problem? Problem is...

Enroll Android Enterprise devices in closed networks with Workspace ONE

As more customers migrate from the legacy Device Admin to Android Enterprise, I get more often questions about networks that have no Internet access (mostly rugged devices in retail, logistics, manufacturing, or high security cases such as police or healthcare IoT). So I think I’ll leave a quick guide/FAQ here. How does closed network enrollment...

Interesting stats on Android Security and AER Program [2019 Android Enterprise Summit]

Interesting statistics regarding Android Exploits and Android Enterprise Recommended influence on buyers presented during Android Enterprise Recommended Summit 2019 London

Android Q Enterprise Features for EMM Admin

This is a brief analysis on the upcoming Android Enterprise Features in Android Q. Read the full notes here. Google has a habit of silently updating those documents, so I expect to update this post once subsequent iterations of Beta are released. The below is my sole opinion, and I welcome hearing yours. NB: it...

[iOS vs Android] OS and Application Updates

I frequently get this question from customers and partners: "How can I control Application and OS Updates in iOS and Android". So I'll drop a note here. Update management includes: Configuring the behaviour of OS upgrades (major), patches, public apps (via App/Play Store, VPP) and private apps (via App/Play Store or directly via EMM)Scheduling updates to happen (or...

Google Play Managed iFrame in Workspace ONE UEM (AirWatch) – App Collections

In two previous posts dedicated to the Managed Google Play iFrame we have covered Private Apps and Web Apps. The last feature of the iFrame interface is called Collections and allows you to organize the Work Play Store app layout, as well as shoot yourself in the foot a few times... As usual, the Collections...

Google Play Managed iFrame in Workspace ONE UEM (AirWatch) – Web Apps

In the previous post I have covered adding Private apps via the Google Play Managed iFrame for Android Enterprise. This time let's deal with the Web Apps (links, web clips). Honestly, it is much quicker to add a web application to WorkspaceONE Identity Manager and expose via the WS1 Intelligent Hub, but if you really...

Does Android P private DNS really contribute to privacy? Or to Enterprise control?

Private DNS is a new feature in Android P, which allows you to globally override the DNS settings (received from your carrier, hotspot provider etc.). This means that the said carrier's or provider's DNS servers will not be able to log your browsing habits. Read more here (Android Police). This looks like privacy, but isn't...