Create an Android Compliance Enforcement Policy

With Android EMM, you have the ability to secure the Android devices within your organization and to enforce the security measures that you configure. The Compliance Enforcement policy lets you configure specific scalable actions to take when devices aren’t compliant with the policies you’ve established – you control when to block the device, and when to wipe the device, if desired.

Prerequisites:

Considerations:

  • Applies to devices on Android 7.0 or later.
  • Supports the following management modes:
    • Work Profile – Personal device
    • Work Profile – Company-owned device
    • Fully Managed device
    • Dedicated device

To create an Android Compliance Enforcement policy:

  1. Log in to the JumpCloud Admin Portal.
  2. Go to DEVICE MANAGEMENT > Policy Management.
  3. In the All tab, click (+).
  4. On the New Policy panel, select the Android tab.
  5. Select the Compliance Enforcement policy from the list, then click configure.
  1. On the New Policy panel, optionally enter a new name for the policy, or keep the default. Policy names must be unique.
  2. For Policy Notes, enter details like when you created the policy, where you tested it, and where you deployed it.
  3. Under Settings, complete these fields for each policy specified:
    • Policy: Select the policy group you want to apply the compliance enforcement actions to:
    • Block Noncompliant Devices After: Enter a number from 030 representing the number of days after which a noncompliant device is blocked from accessing apps and data on the device. 
      • Apply Block To: Select Work Profile to block use of apps in the Work Profile only (apps in the Personal Profile remain unaffected), or Device to block apps in both the Work Profile and the Personal Profile.
    • Wipe Noncompliant Devices After: Enter a number from 030 representing the number of days after which a noncompliant device is wiped. A wipe will either reset the device, or delete the device’s Work Profile. This number should be greater than the number of days configured for the block action.
      • Preserve Factory Reset Protection Data: Select whether to preserve the Android Factory Reset Protection data on the device.

Tip:

Tip: To apply a block immediately, set Block Noncompliant Devices After to 0.

Note:

To unblock a non-compliant device that has been blocked as a result of this policy, the end user will need to bring the device into compliance, or the Admin will need to remove the policy from the device.

Important:

A factory reset erases all data from the phone.

  1. (Optional) Select the Device Groups tab. Select one or more device groups where you’ll apply this policy. For device groups with multiple OS member types, the policy is applied only to the supported OS.
  2. (Optional) Select the Devices tab. Select one or more devices where you’ll apply this policy.

Tip:

For this policy to take effect, you must specify a device or a device group.

  1. Click + to add additional policy compliance rules.
  2. Click save.

Still Have Questions?

If you cannot find an answer to your question in our FAQ, you can always contact us.

Submit a Case