Recommend Profile Settings

Tech Lockdown Team

Prevent App Uninstall and Bypass

If you want to prevent a specific app from being uninstalled (for example, an app that filters content), go to Restrictions > Applications:

Similar to Uninstalling apps, you can consider setting Stop System Apps to Restrict. This will prevent users from force-stopping certain apps.

Set Stop system apps to Restrict

Global App Permission Policy

Consider setting this to auto deny.

Users can install unapproved apps

This is a powerful feature because it allows you to blocklist any app (excluding system apps) that aren't specifically approved in your MDM. Consider checking this option if you need a much more restrictive device setup.

Whitelist Apps

You might want to ensure that some apps cannot be installed onto your smartphone. Here's how you would do this:

Allow users to configure VPN

You can prevent users from adding their own, custom VPN configurations.

Prevent Turning Off Filtered Wi-Fi

If you've set up your home router to filter content using a content policy, you'll want to ensure that your Android smartphone can't bypass it and use an unprotected internet connection.

A common way that Android user's bypass WiFi content filtering is to simply turn off WiFi and use an unfiltered roaming internet connection (4g/5g), but you can prevent this with a managed device.

This is how you would do it:

• Prevent the smartphone from turning off WiFi
• Configure the smartphone to auto-connect to your home WiFi network.

Prevent your smartphone from turning off Wi-Fi

Configure your home Wi-Fi network

Security Restrictions

Security restrictions allow you to create a profile that prevents bypass.

Restore Factory Settings

This setting is useful for some people, who might go to great lengths to access an unfiltered device. Keep in mind that you can still reset the device using the MDM.

Lock Screen Notification Preferences

Consider enforcing either option: Hide Sensitive Content or Don't show notifications at all. This is useful if you are trying to reduce your smartphone usage and don't want to be constantly interrupted by app notifications. Enforcing this setting means that you don't have to manually customize this option. 

Safe Mode

Some bypass methods utilize the device's safe mode. I recommend disabling safe mode.

Developer Mode

Similar to safe mode, developer mode can be used to bypass some restrictions. However, these methods are more difficult than safe mode. Consider disabling this.

Dumb Phone Configurations

These are highly restrictive settings that are commonly seen with dumb phone configurations.

Disable Android Browser

Restricting the android browser will remove the ability to use any kind of internet browser on the android device. This setup is incredibly restrictive, but useful for people who want a "dumb phone" without sacrificing GPS and music players.

Restrict Access to Unapproved Wi-Fi Networks

For parents wanting to restrict which Wi-Fi networks there children can access, you can restrict what Wi-Fi networks your child's smartphone can connect to.

You will probably get a warning like this:

Restrict Default Apps with Kiosk Mode

Kiosk mode is a feature that allows you to lock your Android smartphone to a single app or a limited set of apps. It enables you to access to even more device restrictions. 

Here's my phone running in kiosk mode in Multi App Mode:

Enable Kiosk Mode

Disable Default Apps

Consider blocking access to the following Android features by not including them in the Allowed Apps list:

1. General Settings app
2. Web Browsers
   
3. Google Play store or Android App Store
   

Hide an App

Restrict Access to Networks

Disable Task Manager

Next Up