The following sections describe the operations that can be carried out on Android-powered device. If the following device operations are applied on iOS-powered devices, it will not affect the devices.
Searching for specific devices
Follow the instructions below to search for specific devices:
- Click on the Device Management tab in the EMM Console.
- Search for the devices. The following search options are available:
- Username - Ability to search for users based on a specific username.
- Device Type - Ability to search for users based on a specific mobile type (i.e., Android, iPad, iPod and iPhone).
- Ownership - Ability to search for users based on whether the device belongs to them (BYOD) or whether the device is owned by the company (COPE).
- Click Find. The enrolled devices corresponding to the search criteria will be displayed.
Applying an operation to devices
Follow the instructions below to apply operations to one or more device(s):
Click on the Device Management tab in the EMM Console.
Select one of the following operations to be applied on the devices from the operation drop-down list. Optionally, enter the corresponding data. For more information, see Device Operations.
Device Lock
Clear
Camera
Passcode Policy
Set Passcode
Enterprise Wipe
Message
Mute Device
Wifi
Email configurations
Wipe
Encrypt Storage
APNS Configurations
Google calendar
LDAP
Click OK to apply the selected operation.
Activating the device lock on mobile devices
Follow the instructions below to activate the device lock one or more mobile device(s):
Click on the Device Management tab in the EMM Console.
Select Device Lock from the operation drop-down list.
Click OK. The device lock will get activated on the selected devices.
Removing the device lock on mobile devices
Follow the instructions below to remove the device lock one or more mobile device(s):
Click on the Device Management tab in the EMM Console.
Select Clear from the operation drop-down list.
Click OK. The device lock will get automatically removed on the selected devices.
Disabling the camera on mobile devices
Follow the instructions below to disable the camera one or more mobile device(s):
Click on the Device Management tab in the EMM Console.
Select Camera from the operation drop-down list.
Click OK. The camera will get disabled on the selected devices. Thereby, those users will not be able to use the camera on their mobiles.
Setting a passcode policy on mobile devices
Follow the instructions below to set a passcode policy for one or more mobile device(s):
Click on the Device Management tab in the EMM Console.
Select Passcode Policy from the operation drop-down list.
- Enter the required details as explained below:
Maximum failed attempts - The maximum number of times the end-user can enter his/her device passcode incorrectly. EMM will take different courses of action based on the OS when the failed attempts exceed the maximum failed attempts. Android-powered devices will be automatically reset to the original factory settings. While, iOS-powered devices will be automatically disabled. Thereby, making the user reset the iOS device to the original factory settings.
Minimum length - The minimum number of alphanumerical values that the end-user can enter as his/her passcode. However, if the "Allow Simple" option is set, this rule will be overridden and the user will be allowed to have a passcode of even one alphanumerical value.
Days of Expiration - The number of days after which the end-user will have to change his/her passcode.
Minimum complex characters - The maximum number of special characters (e.g., @ # etc.) that the end-user will have to enter in his/her passcode. However, if the "Allow Simple" option is set, this rule will be overridden and the user will be allowed to have a passcode without a single complex character.
Passcode History Length - The end-user will not be allowed to reuse a passcode that he/she previously entered until he/she exceeds the set password history length (e.g., if the passcode history length is 3 and your passcode currently is 21345, you can not enter 21345 as the passcode in the next three consecutive passcode rotation cycles).
Allow Simple - If this checkbox is selected, the end-user will be able to have a simple passcode (e.g., a, 123,abc, a1bc) and the following criteria in the passcode policy will not be applicable to the end-user's passcode:
Minimum length
Minimum complex characters
Require Alphanumeric - If this checkbox is selected, it is mandatory for the end-user to have a mix of digits and characters in his/her passcode.
Click OK. The respective end-users will be prompted to add a screen lock passcode in compliance with the corresponding passcode policy.
Unregistering mobile devices
Follow the instructions below to unregister one or more mobile device(s):
Click on the Device Management tab in the EMM Console.
Select Enterprise Wipe from the operation drop-down list.
Click OK. When this operation is executed, the device will be unregistered from EMM. If NitroDesk email client is used, then the email container and settings will also be removed.
Sending a message to mobile devices
The EMM admin can use this device operation to send group messages or even private messages to the EMM users.
Follow the instructions below to send a message to one or more mobile device(s):
Click on the Device Management tab in the EMM Console.
Select Message from the operation drop-down list.
- Enter the message that needs to be sent.
Click OK. The respective devices will received the sent message.
Muting mobile devices
Follow the instructions below to mute one or more mobile device(s):
Click on the Device Management tab in the EMM Console.
Select Mute Device from the operation drop-down list.
Click OK. The silent profile will get automatically activated on the selected devices.
Configuring Wifi on mobile devices
Follow the instructions below to configure Wifi one or more mobile device(s):
Click on the Device Management tab in the EMM Console.
Select Wifi from the operation drop-down list.
- Enter the required details as explained below:
SSID - Service Set Identification (SSID) is used to differentiate one WLAN from the other as all wireless devices on a WLAN must employ the same SSID to communicate with each other.
Password - The password used to enable Wifi settings. The password should be between 8 to 20 alphanumerical values in length and it can have complex characters.
Click OK. Thereafter, the respective users will be able to access the Wifi via their devices.
Configuring an email account on mobile devices
The email configuration device operation will allow the admin to configure an email account on the user's devices. This device operation is directly supported by iOS-powered devices. However, it is supported on Android-powered devices only when the NitroDesk email client is being used.
Follow the instructions below to configure an email account on one or more mobile device(s):
Click on the Device Management tab in the EMM Console.
Select Email Configuration from the operation drop-down list.
Click OK. Thereafter, the respective users will be able to access email via their devices.
Encrypting data storage on mobile devices
The EMM admin will be able to use this device operation to encrypt data on an Android-powered device. Thereby, when the device is locked the data will be securely encrypted and the data will be made readable when the device passcode is entered.Follow the instructions below to encrypt data storage one or more mobile device(s):
Click on the Device Management tab in the EMM Console.
Select Wifi from the operation drop-down list.
- Enter the required details as explained below:
SSID - Service Set Identification (SSID) is used to differentiate one WLAN from the other as all wireless devices on a WLAN must employ the same SSID to communicate with each other.
Password - The password used to enable Wifi settings. The password should be between 8 to 20 alphanumerical values in length and it can have complex characters.
Click OK. This device operation will only affect Android-powered devices.
Configuring APN on iOS mobile devices
The APN configuring device operation is iOS specific. Therefore, it will only get applied to iOS-powered devices. In addition, in iOS the EMM server does not detect whether a device (i.e., iPad) has only Wifi, or whether the device has 3G and Wifi. If there is only Wifi, the APN configurations can not be pushed and a policy violation will occur.
Follow the instructions below to configure APN one or more iOS mobile device(s):
Click on the Device Management tab in the EMM Console.
Select APN from the operation drop-down list.
- Enter the required Access Point Name (APN) details as explained below:
Carrier - The Access Point Name.
Username - Optional. The username of the specified APN. In the event the username is not entered, the device prompts the end-user for it when the profile is being enforced. This is used for authentication purposes.
Password - Optional. The password of the specified APN. In the event the password is not entered, the device prompts the end-user for it when the profile is being enforced. This is used for authentication purposes.
Proxy Server - Optional. The IP address or the URL of the APN proxy.
Proxy Port - Optional. The port number of entered APN proxy.
Use SSL - This determines whether or not to use SSL. If this option is not selected http will be used as opposed to https . By default, SSL will not be used.
Click OK to configure APN on the selected users devices. This device operation will only get applied to the iOS-powered mobile devices.
Configuring LDAP on iOS mobile devices
The LDAP configuring device operation is iOS specific. Therefore, it will only get applied to iOS-powered devices.
Follow the instructions below to configure LDAP on one or more mobile device(s):
Click on the Device Management tab in the EMM Console.
Select LDAP from the operation drop-down list.
- Enter the required details as explained below:
LDAP Description - Optional. A description on the LDAP account.
Host Name - The host name of the LDAP account.
Use SSL - This determines whether or not to use SSL. If this option is not selected http will be used as opposed to https. By default, SSL will not be used.
Click OK to configure LDAP on the selected devices. This device operation will only get applied to the iOS-powered mobile devices.
Viewing device specific information
Follow the instructions below to view information that is specific to a device:
Click on the Device Management tab in the EMM Console.
Search for the device and click on the device owner's username to view the information specific to the selected device. The owner's device information page provides the following information:
Description Device information The following device information is retrieved automatically when a user registers with EMM.
Product The product naming convention used by the device (i.e., iPhone 5,1
,iPad2
).Serial The serial number of the device. IMEI The International Mobile Station Equipment Identity (IMEI) number of all GSM devices. This is not applicable to devices such as iPads which work without a SIM. Device This shows the name the user has given his/her device (e.g., Kim's iPhone) Version The version of the device registered (i.e., 11B511) Model The type of device is stated (i.e., iPhone, iPad) Policy If the device does not comply to certain criteria in the enforced policy, the aspects in which the device is none compliant will be highlighted under this section. Application list A list of all the applications that have been installed on the user's device are listed under this section. Notification The date and time of all communication records, between the EMM server and the device are logged under this section. Operations All the operations that the user/admin are able to carryout on the device are shown under this section. Click on the respective device operation link and provide the required details (if requested) to apply the selected operation on the device. Device type The device type tab is used to show a separate device information page for each of the devices that are registered under the selected user.