App lock device policy 编辑

The App lock device policy defines a list of apps that are allowed to run on a device, or a list of apps that are blocked from running on a device. You can configure this policy for both iOS and Android devices, but the exact way the policy works differs for each platform. For example, you cannot block multiple apps on an iOS device.

Likewise, for iOS devices, you can select only one iOS app per policy. This means that users are only able to use their device to run a single app. They cannot do any other activities on the device except for the options you specifically allow when the app lock policy is enforced.

In addition, iOS devices must be supervised to push App Lock policies.

Although the device policy works on most Android L and M devices, app lock does not function on Android N or later devices because Google deprecated the required API.

To add or configure this policy, go to Configure > Device Policies. For more information, see Device policies.

iOS settings

• App bundle ID: In the list, click the app to which this policy applies or click Add new to add a new app to the list. If you select Add new, type the app name in the field that appears.
• Options: Each of the following options applies only to iOS 7.0 or later. For each option, the default is Off except for Disable touch screen, which defaults to On.
  • Disable touch screen
  • Disable device rotation sensing
  • Disable volume buttons

  • Disable ringer switch

    When Disable ringer switch is On, the ringer behavior depends on what position the switch was in when it was first disabled.

  • Disable sleep/wake button
  • Disable auto lock
  • Disable VoiceOver
  • Enable zoom
  • Enable invert colors
  • Enable AssistiveTouch
  • Enable speak selection
  • Enable mono audio
• User Enabled Options: Each of the following options applies only to iOS 7.0 or later. For each option, the default is Off.
  • Allow VoiceOver adjustment
  • Allow zoom adjustment
  • Allow invert colors adjustment
  • Allow AssitiveTouch adjustment
• Policy settings
  • Remove policy: Choose a method for scheduling policy removal. Available options are Select date and Duration until removal (in hours)
    • Select date: Click the calendar to select the specific date for removal.
    • Duration until removal (in hours): Type a number, in hours, until policy removal occurs. Only available for iOS 6.0 and later.

Android settings

Note:

You can’t block the Android Settings app by using the App Lock device policy.

• App Lock parameters
  • Lock message: Type a message that users see when they attempt to open a locked app.
  • Unlock password: Type the password to unlock the app.
  • Prevent uninstall: Select whether users are allowed to uninstall apps. The default is Off.
  • Lock screen: Select the image that appears on the device’s lock screen by clicking Browse and navigating to the file’s location.

  • Enforce: Click either Blacklist to create a list of apps that are not allowed to run on devices or click Whitelist to create a list of apps that are allowed to run on devices.

    Note:

    The XenMobile Server console includes the terms “blacklist” and “whitelist”. We are changing those terms in an upcoming release to “block list” and “allow list”.

• Apps: Click Add and then do the following:
  • App name: In the list, click the name of the app to add to the allow or block lists, or click Add new to add a new app to the list of available apps.
  • If you select Add new, type the app name in the field that appears.
  • Click Save or Cancel.
  • Repeat these steps each app you want to add to the allow or block lists.