Android | Entgra Iot Server

Android Features

Entgra IoTS 4.0.0 is a Google Enterprise Partner for Android.

Supported Operations

Entgra IoT Server facilitates one time Operations that can be performed remotely via the Device Management Console. These operations are useful for runtime maintenance of devices.

The type of operations available for Android devices and are applicable for each enrollment type is summed up as per the table below. For details on each, click here.

Feature - DescriptionLegacyWork ProfileDedicated (Kiosk)Fully Managed (COPE)System App
Remote screen keyboard and mouse inputs in screen-sharing mode.
Allow-list/Block-list connected peripherals plugged-in.
Force devices to be locked on to a given WiFi network.
Entgra secure browser application with remote settings.
Device location history view to track the fleet’s history.
Lock device when passcode fail attempts exceeded the limit.
Notification displaying for Kiosk mode.XXXX
Display a custom message when the device is locked and for locked settings.
Offline un-enrollement via a special per device admin pin code.
Disable airplane mode restrictions.
Enroll COPE device using mobile data after a factory reset.
Get Device Information - Fetch the device's runtime information.
Get Device Location Information - Fetch the device's current location.
Get Installed Applications - Fetch the device's installed application list.
Ring Device - Ring the device for the purpose of locating the device in case of misplacement.
Upload Device - Upload file to a specific folder on the device.
Download Device - Download file on a specific folder on the device.
Mute Device - Put the device in silent mode.
Change Lock Code - Changes the device's currently set lock code. From Android N upwards, clear passcode will not work.
Clear Password - Remove any password that the device owner has put. From Android N upwards, clear passcode will not work.
Send Notifications/Messages - Send a notification (message) to the device.
Enterprise Wipe - Wipe the entreprise portion of the device.
Wipe Device (Factory reset) - Factory reset a device.
Device Lock (soft lock) - Lock the device remotely. Similar to pressing the power button on the device and locking it.
Reboot Device - Restart the phone for example for troubleshooting purposes.
Upgrade Firmware - Upgrade Android operating firmware ensuring that firmware and the device has to be compatible and only applicable in OEM scenarios.
Execute Shell Command - Remotely execute the shell commands on the device's command prompt.
Hard Lock - Lock a device remotely by an admin and only the admin can unlock the device. 
Manage Web Clip - Install a shortcut link to a web page/web app on the phone's home screen.
Trigger Google Play App - Install an app from the google play store.
Install/Uninstall/update applications - Capability to perform various application management tasks such as install, uninstall and update apps.
View Device Screen - Screen sharing with the Admin.
Remote Control Device - Allow Admin to remotely control the device. 
Get Logcat - View the log of the operating system.
Silent App Install - Install apps on the device without prompting the user to click install.
Remote Kiosk Enable - Enable or disable kiosk mode remotely for maintenance reasons, troubleshooting etc.

Policies

The Policies that can be applied on an Android device depends on the way the device is enrolled with the server.

Accordingly, the table below indicates the policies applicable for each type of enrollment.

Feature - Description Legacy Work Profile Dedicated / Fully Managed Fully Managed (COPE) System App
Passcode Policy - Add a passcode strength policy to the device or to work profile
Encryption Settings - Execute the encypt device storage.
Wi-Fi Settings - Push a configuration contaning the wifi profile of the company.
Virtual Private network (VPN Settings) - Push a configuration contaning the VPN profile of the company.
Work-Profile Configurations - Decides which system apps must be enabled or disabled in a work profile
COSU Profile Configuration - Configure the behaviour of the Kiosk
Application Restriction Settings - Decides which apps are allowed do be in a device.
App screen usage time policy to track/restrict screen usage per app.
Runtime permissions - Permissions app require to work can be uptomatically granted and locked.
System Update Policy (COSU) - Specify the strategy or the time windows to perform OS updates.
Monitor/Revoke Policies - Continuously monitor the policies of the device to detect any policy violations.
Certificate Install Settings - Install certificate to devices remotely.
Global Proxy settings - Reroute all the http communication of a device via a global http proxy.
Enrollment app install - Decides which apps needs to be installed upon enrollment.
Remote App configurations - Send the app configurations for user's installed apps.
Disable removal of profile - Disable the user's ability to unenroll from EMM.

Restrictions Policy

Restriction Policies are those that can be applied on a device restricting or controlling the use of certain specific device features. There are a large number of restrictions that can be applied on an Android device.

The following table lists the available Restriction Policies for Android devices.

Feature - DescriptionLegacyWork ProfileDedicated / Fully Managed / SystemFully managed (COPE)System app
Disable access to camera
Disable modifying certificates in the device
Disable configuring VPN settings
Disable configuring App control by hiding the status bar of App Control
Disable cross-profile copy-paste - Copying text between profiles is blocked.
Disable debugging - Disable usb debuging
Disable installing apps to the device
Disable installing apps from unknown sources
Disable modifying accounts such as Google, Facebook from being modified/ added/ removed
Disable outgoing beams - Disable using NFC to transfer data.
Disable sharing device location.
Disable uninstalling apps
Disable parent profile app linking - Disable apps in the personal profile to handle web links from the work profile.
Ensure verifying apps - Enforce only verified apps can be installed on the device.
Disable screen capture - Disable capturing the screen of the device.
Enable auto timing - Enable or diable using time from mobile network as system time.
Disable SMS - Disable access to SMS.
Disable volume adjust - Disable adjusting the volume of the device.
Disable cell broadcast - Disables cell broadcasting messages of the network.
Disable configuring bluetooth settings.
Disable configuring moble network settings.
Disable configuring tethering settings.
Disable configuring WiFi settings.
Disable safe boot - Disable booting into safe mode.
Disable outgoing calls
Disable mount physical media - Disable plugging into different media devices.
Disable create window - Disable showing certain notifications, toasts and alert by apps.
Disable factory resetting of devices.
Disable removing users from device.
Disable adding new users to device.
Disable network reset - Disable user from performing network setting reset.
Disable USB file transfer - Disable transfering data over USB.
Disable unmute microphone - Configure access to microphone.
Disable status bar - Block user from opening the notification bar and access to status bar.
Disable set wallpaper - Disable changing wallpapers.
Disable auto fill - Disable auto filling forms.
Disable bluetooth - Disable bluetooth.
Disable bluetooth sharing - Disable sharing via bluetooth.
Disable data roaming - Disable data roaming.