MobiLock Client Mode for Corporate Owned Devices

As an enterprise looking to manage Corporate Owned Android devices, you might want to control how the corporate policies are applied and how your end-users interact with the MDM application. The two most frequently used methods of interaction or modes of operation for an MDM application are,

  1. Kiosk Mode: In this mode the MDM client application replaces the default home launcher of the device with a custom one so that it can show a custom list of approved applications, Whitelist websites and applies the corporate policies.
  2. Agent Mode: In this mode the MDM client application silently runs in the background, thereby giving users the default device launcher experience, yet protecting the device and applying the corporate policies.

MobiLock offers you the flexibility to setup the MobiLock Pro MDM client in either the Kiosk mode or the Agent mode, thereby allowing you to choose the experience that you want to give to your end-users.

In this document, we will discuss the various scenarios and help you choose the correct mode of operation for MobiLock Pro Client.

When to Use Kiosk Mode or Set MobiLock as Launcher?

The following set of questionnaire helps you decide if you want to set MobiLock as the Launcher. If the answer to any one of the questions below is a Yes, then you should be consider using Kiosk/Launcher mode.

  1. Are you using Devices that have an Android OS version less than 6.0?
  2. Are you using Devices that are not Android Enterprise recommended, that is they do not support afw#mobilock method of enrollment?
  3. Are you deploying the managed device in an unattended environment like a Shopping Mall, Entry/Exit gates etc?
  4. Do you want to use the managed device to run only one application all the time (Single/Default App Mode)?
  5. Do you want to control the application listing and ordering on the Home screen?

When to Use Agent Mode or Set MobiLock as Agent?

Prerequisite: Unlike Kiosk mode, Agent mode works best when MobiLock is set a Device Owner. This means that the devices are enrolled via afw#mobilock.

The following set of questionnaire helps you decide if you want to set MobiLock as the Agent. If you answer in Yes to one of the questions, then you should consider Agent mode.

  1. Do you want to use MobiLock as a Mobile Application Management solution?
  2. Do you want to let the end-users use the Corporate Device as their personal device but still apply a limited set of policies?
  3. Do you want to use the default Android launcher UI so as to give the default experience to your end-users?
  4. Do you want to hide the MobiLock MDM agent from the list of applications?
  5. Do you want MobiLock to completely disable the Applications that are not approved for corporate use?

Feature Comparison Matrix

The table below helps you compare the support for majority of features across the Launcher and Agent mode.

Legend:

  • Yes - Works in both Legacy & Android for Work(afw).
  • Yes* - Requires Android for Work (EMM management).
  • Yes** - Requires Android for Work (EMM management) or selected Samsung, Sony or LG Devices.

Feature

Description

Kiosk/Launcher Mode

Agent Mode

Minimum Android OS Support

The minimum Android version required for optimal performance.

Android 4.2 and above.

Android Enterprise Recommended devices running Android 6.0 and above.

Application Policy

This lets you control the applications that are allowed to be used and the applications that are blocked.

Yes

Yes* - Requires EMM management.

Whitelisting of Websites via MobiLock Browser

This lets you use MobiLock Browser to give a controlled browsing experience.

Yes

No

Whitelisting of Websites via Google Chrome

This lets you control Google Chrome for a controlled/restricted browsing experience

Yes*

Yes*

Branding

This lets you set a custom Wallpaper, custom lock screen and logo.

Yes

Yes

Application Order on Home screen

This allows you to define the application ordering on Home screen.

Yes

No

Single App Mode (Kiosk Mode)

This allows you to set an application to run always.

Yes

No

Custom Notification Centre

This lets you replace the system status bar with a custom notification centre.

Yes

No

Volume Settings Control

This lets you control the Volume settings of device.

Yes

Yes

Wi-Fi Configurations

This lets you push custom Wi-Fi configurations to device.

Yes

Yes

Display Settings

Allows you to control the display settings like screen timeout, brightness.

Yes

Yes

EMM Settings

Allows you to secure the devices by applying policies related to Communication, Keyguard, Network, Account management.

Yes*

Yes*

Hide the MDM Agent

Allows you to hide the MobiLock MDM agent.

No

Yes

Default Android Launcher Experience

Allows users to use the default Android launcher when the device is locked.

No

Yes

Corporate Owned Personally Use

Allows the device to be used as a personal device, at the same time applying security policies to get control on the device.

No

Yes

Configure Exchange Settings

Allows admins to remotely configure Exchange settings on the device.

Yes*

Yes*

Samsung Knox Secure Settings

Allows Samsung specific secure settings for better corporate security.

Yes

Yes

LG Guard Secure Settings

Allows LG specific secure settings for better corporate security.

Yes

Yes

Sony Enterprise Secure Settings

Allows Sony specific secure settings for better corporate security.

Yes

Yes

Enterprise Application Management (In-house apk)

Allows installation and updates of Enterprise applications.

Yes

Yes

Play for Work Applications

Allows installation of applications directly from Google Play Store.

Yes*

Yes*

Remote Application Permission Control

Allows controlling the application permissions, pushed via Google Play store.

Yes*

Yes*

Remote Application Configurations

Allows remote configurations of applications pushed via Google Play Store.

Yes*

Yes*

Factory Reset Protection

Allows you to configure authorized GMail id's that can be used to protect unauthorized usage in case the the device is factory reset.

Yes*

Yes*

Remotely Configure Hotspot Settings

Allows you to configure the device as a Hotspot device.

Yes

Yes

Broadcast Messages

Allows you send one way messages to devices.

Yes

Yes

Passcode/Password Policy

Allows you to set a Password device for better corporate security.

Yes

Yes

APN Settings

Allows you to remotely configure Access Point Names on the devices.

Yes**

Yes**

How to configure & control the Mode for MobiLock?

MobiLock offers you Device Profiles, that let you configure a group of policies and settings, that can be applied to one or multiple devices. Please head to our Android Device Profile for Corporate devices to see how you can control the mode for MobiLock client application.


How did we do?


Powered by HelpDocs