topic MDM - Android in Endpoint Security

MDM - Android

gary.stephens1 — Thu, 31 May 2018 14:00:25 GMT

Has anyone had success with designing a policy that a user CANNOT remove either by accident or intentional on the Android o/s? We manage this within IOS using DEP which is great, but am widening to include our Android users but am conscious we issues devices that can be wiped or tampered with. Yes I know about HR Policies, Yes I know about education, I want to enforce by design, not by option - have you succeeded ?

Thanks

Re: MDM - Android

PaulAM87 — Thu, 31 May 2018 14:34:31 GMT

Hi Gary,

Do you mean the meraki management app itself?

are you planning on setting the device up as meraki being the owner?

Re: MDM - Android

gary.stephens1 — Thu, 31 May 2018 14:51:51 GMT

To be honest I hadn't even got that far, we have a well established Cisco Wireless network an could use Meraki alongside, but seems overly complex - but was interested if anyone had secured androids on anything- was stating from a low point 😉

Re: MDM - Android

PaulAM87 — Thu, 31 May 2018 14:56:10 GMT

we all have to start somewhere 🙂

we use meraki on android devices where i work and i have found that unless you have the password or can get into the factory reset options of the device meraki can't be removed.

i believe there is something called factory reset protection (FRP) available from google which can stop this but i haven't tried it myself.

Re: MDM - Android

Philip D'Ath — Thu, 31 May 2018 19:23:34 GMT

Are you using "Device Owner Mode", if not, you should be.

https://documentation.meraki.com/SM/Deployment_Guides/Android_Enterprise_Deployment_Guide_(Android_for_Work)#Device_Owner_Enrollment

This gives you complete control over the Android device.

And yes - everything about MDM is painful.

Re: MDM - Android

gary.stephens1 — Thu, 31 May 2018 20:39:19 GMT

That looks interesting

thanks for shareing

Re: MDM - Android

gary.stephens1 — Thu, 31 May 2018 20:41:59 GMT

Ok that sounds cool, tbh we had been securing IOS so well it seemed poor not to have the same control with Android, this looks good. Thanks for the pointers