Zebra TC75 -> Block User install application

Zebra TC75 -> Block User install application

Hello all,

we have some device as zebra tc 75x.

We have a mobicontrol on version 13.3.034.54

Mobicontrol client is on version : 13.5.1617

 

Well, we have the lock down but by selected text (select, press and share) on lock down some user can access to the device (lockdown off).

Ok we have make a change by include some css on the lock down for to avoid this .

It's seems to work.

 

But, do you know in case of user can access to the device (lockdown off) if it possible to block any installation of application ?

My goal will be to disable any installation of application made by a user...

 

I've search a little and see nothing in feature control but on application run control i've seen it's possible to add white application list and black application list.

 

But perhpas something exist and i haven't see it ?

 

thanks for sharing your knowledge

2 Answers

Order By:   Standard | Newest | Votes
Raymond, Chan | posted this 09 January 2019

With Android+ agent, you can at least use"disable install from unknown source" feature control to disallow installation of .apk file copied onto the device by any means.

 

Next, if you block Settings with Feature control or application-run-control, and has no Google account added on the system, installation from Google Play store is not possible.  Otherwise, you can consider blacklisting Google Play Store app to disallow installation of apps.

 

The most secure method is to add an application whitelist in application-run-control to include all the apps allowed to be run/installed on the device.  Any apps not on the whitelist will not be installable, and any apps freely bundled in the device firmware will be disabled.  This approach should work for many, if not all, Android+ agents.  But care must be taken not to miss out any system apps and services, without which the device may become unstable or unreliable.

 

If you are bold enough to switch to use Android Enterprise agent in managed-device mode (which requires factory reset of whole device),  then it is possible to include various feature control options to disallow any non-managed apps from being installed by device end-users, and can often save the hassle of building the right application-run-control whitelist.

 

 

 

  • 0
  • 0
christopheBERNARD | posted this 10 January 2019

Hi raymond,

 

ahhh yes as you said i think :

- disable install know unknow source

- block google play store

 

will be enough for us.

 

thanks you so MUCH for the time you spend here ...

 

Have a nice day

  • 0
  • 0
Give us your feedback
Give us your feedback
Feedback