Setting up a project policy

Kiosk Settings

• Kiosk Package: Select the package of the APK that you would like to kiosk.
• To kiosk an application that is part of the company content, add it to the project content, and select it here from the dropdown menu.
• To kiosk an application that is not part of the company content, choose 'Other' and then enter the package name of that application. The application must be on the device.
• Multi-App Kiosk:
• You can add packages to be displayed on the Multi-Kiosk home-screen by using the "Add/Edit Packages" button.
• In order to be displayed, these packages must first be uploaded under the project content tab.
• You can change the wallpaper to be used during Multi-App Kiosk mode using the "Multi-App Kiosk Wallpaper" dropdown menu.
• These wallpaper options must first be uploaded to the content tab.
• Kiosk PIN: This PIN must be entered on the device in order for it to exit the kiosk.
• If there is not a PIN set, the user may exit the kiosk at any time.
• Kiosk Wallpaper: Choose an image to be the wallpaper of the device. You can upload images from the Content tab.
• Kiosk Home Screen Shortcut: Select the packages of the applications or url of links that should appear on the home screen.
• Other Packages Allowed During Kiosk: Choose the package names of applications that should be able to launch while in a kiosk.
• Allowed by default:
• Android Settings (com.android.settings)
• Google Play Store (com.android.vending)
• Additional Kiosk Features:
• Disallow Factory Reset: Prevents user from resetting the device to its factory defaults.
• Disallow Safe Boot: Prevents user from starting the device in safe mode where the system won’t automatically launch your app.
• Disallow Mounting Physical Data: Prevents user from mounting any storage volumes they might attach to the device.
• Disallow Volume Control: Mutes the device and prevents user from changing the sound volume and vibration settings.
• Disallow Adding User: Prevents user from adding new users, such as secondary users or restricted users.
• The system automatically adds this user restriction to fully managed devices but it might have been cleared.

Device Settings

• Audio Volume Level: Set the global volume of the device (Media, notifications, system, and ringtone).
• The user can still modify the volume after it is set by this policy, but the volume will be reset to this level after device check-in.
• Display Brightness: Set the brightness of the device.
• The user can still modify the brightness after it is set by this policy, but the brightness will be reset to this level after device check-in.
• Organization Name: Changes the lock screen message 'Device is managed by your organization' to display the name you specify.
• Lock Screen Info: Sets an additional lock screen message.
• Display Sleep Time-out: Select a time frame that a device's screen should stay lit.
• Enter a custom time frame in seconds on supported models (LM-G710ULM is not supported).
• Auto-Rotate Screen: Turn automatic screen rotation on/off. Note: Must allow the Management application to modify system settings to control this setting.
• Home Screen wallpaper: Choose an image to be the wallpaper of the device.
• You can upload images from the Content tab.
• Also allow/disallow user to be able to change the wallpaper.
• Location Settings: Sets the accuracy level of the device's location setting.
• Select Tracking Mode: Select the accuracy setting desired to locate devices. This setting will only be used as a priority for location requests.
• Select Device Location Mode: Sets the accuracy level of the device's location setting. Supported on Android Oreo (8.1) and lower.

• Time Settings: Sets whether the system time and system time zone is automatically updated with the current network connection.
• Enable Auto Time: Sets Device Time to sync with Network Time.
• Enable Auto Time Zone: Sets Device Time Zone to sync with the Network's Time Zone.

• Doze Mode Whitelist: Add application packages to this list so that they will not be affected by Android Doze Mode.
• Doze mode is a feature which prevents certain tasks from running if your device is in idle state.
• Doze in devices reduces power consumption by deferring background CPU and Network activity for applications.
• Whitelist means packages which are considered acceptable to be put on Doze Mode.

Management App Settings

• Management App Menu: settings for the Management app after it is installed.
• Enable Management Settings Menu: Enable / disable the settings menu in the Management phone application.
• Enable 'Reload Policies': Enable / disable the 'Reload Policies' item in the settings menu of the Management phone app.
• Enable 'Manage Wi-Fi Networks': Enable / disable the 'Manage Wi-Fi Networks' settings in the options menu of the Management phone app.
• Enable 'Manage Mobile Networks': Enable / disable the 'Manage Mobile Networks' item in the settings menu of the Management phone app.
• Enable 'Set Password': Enable / disable the 'Set Password' item in the settings menu of the Management phone app.
• Enable 'View Policies': Enable / disable the 'View Policies' item in the settings menu of the Management phone app.
• Enable 'Logout': Enable / disable the 'Logout' item in the settings menu of the Management phone app.
• Enable 'Exit': Enable / disable the 'Exit' item in the settings menu of the Management phone app.
• Hide the Management App in the App Drawer: Checking this this will hide the Management app from the phone's App Drawer.

Note: If using "User Interaction Required" deploy type, the user may open the Management app by clicking on it in the notification shade.

Application Settings

• Start Application on Install: Application in this list will start after being installed.
• Runtime Permission Policy: This sets the default behavior of applications when they attempt to ask for a permission.
• Prompt: The user is asked whether they want to allow the permission or not.
• Grant: all applications are silently granted permissions by default when they attempt to ask.
• Deny: all applications are silently denied permissions by default when they attempt to ask.
• Block Applications: This prevents the application from being used and it will no longer show up on the home screen.

Update Settings

• Device Update Policy: Set the update setting for the device. The device will force system updates based upon the setting you have selected.
• Automatic: Installs system updates as soon as they become available.
• Windowed: Installs system updates during a scheduled daily time.
• PostPone: Postpones the installation of system updates for 30 days.
• Note: KLM key required if using Samsung KME to deploy.

Security

• Communication: Disable Device Communication. Note: Emergency calls can still be made if incoming and outgoing calls are disallowed.
• Allow Incoming SMS Messages: Checking this allows incoming SMS messages to be received by this device using an active SIM.
• Allow Outgoing SMS Messages: Checking this allows outgoing SMS messages to be sent by this device using an active SIM.
• Allow Incoming MMS Messages: Checking this allows incoming MMS messages to be received by this device using an active SIM.
• Allow Outgoing MMS Messages: Checking this allows outgoing MMS messages to be sent by this device using an active SIM.
• Allow Incoming Calls: Checking this allows incoming calls to be received by this device using an active SIM.
• Allow Outgoing Calls: Checking this allows outgoing calls to be made by this device using an active SIM.
• Recommended Kiosk Restrictions:
• Disallow Factory Reset: Prevents user from resetting the device to its factory defaults from Settings. The user can still factory reset from recovery.
• Disallow Safe Boot: Prevents user from starting the device in safe mode where the system won’t automatically launch your app.
• Disallow Mounting Physical Data: Prevents user from mounting any storage volumes they might attach to the device.
• Disallow Volume Control: Mutes the device and prevents user from changing the sound volume and vibration settings.
• Disallow Adding User: Prevents user from adding new users, such as secondary users or restricted users.
• Restrictions:
• Allow Installing Applications from Unknown Sources: allow third-party applications to be installed on the device.
• Allow Debugging Features: allow access to developer mode on the device.
• Allow Changes to Applications: allow the following changes to applications: uninstalling apps, disabling apps, clearing app caches, clearing app data, force stopping apps, and clearing app defaults.
• Allow Lock Screen: allow the device to have a lock screen. This must be enabled to set a required password quality. Setting the lock screen to disabled has the same effect as choosing "None" as the screen lock type. However, this call has no effect if a password, pin or pattern is currently set. If a password, pin or pattern is set after the lock screen was disabled, the lock screen stops being disabled. As of Android Pie (9.0) this also dismisses the lock screen if it is currently shown.
• Allow Screen Capture: Turn screen capture on/off. Disabling will not allow users to take screenshots.
• Allow Camera: This will disable or enable the camera app. The app will still be visible in the app drawer and on the home screen.
• Advanced Restrictions:
• Remove Device Owner After Setup: Checking this this will deactivate device owner permission after initial customization is completed.
• Note: use with caution as this is a non-reversible action. Factory reset the device to fully remove the Management application.
• Disable Factory Reset Protection: Turn factory reset protection on/off.
• If a Google account has been added to a device prior to a factory reset, factory reset protection (FRP) requires those account credentials to be used while going through the setup wizard.
• Note: toggling this feature after a device is already FRP locked, will NOT allow FRP to be bypassed.
• Password Quality: Use this to set the required password restrictions for devices on this project.
• The user will be prompted to set a password that matches the password restriction rules at the next check-in.

Connectivity Settings

• Bluetooth: This will turn bluetooth on or off.
• Wi-Fi: Select whether Wi-Fi is disabled and specify Wi-Fi configurations that devices can connect to.
• Disable Wi-Fi allows you to toggle Wi-Fi on devices in the project.
• To Enable specific Wi-Fi networks: specify a SSID and Password and click 'Add Wi-Fi Configuration'.
• Note: you can view the configurations you specify in the list by the SSID. You can also remove configurations by clicking 'x' next to each SSID in the list.

Network Settings

• Mobile Network Settings:
• Enable Data Roaming: Choose whether or not to enable data roaming. Suggested to disable data roaming unless necessary.
• Domain Whitelist:
• While enabled, this will block all websites except the ones you have added to the whitelist.
• The whitelist must be enabled in order to add domains
• Disabling the list will allow all domains. There will be no restrictions on internet searches.
• It is recommended you use the wildcard variable * for domains that have mobile versions and non-standard URLs. Example: to enable Facebook on all devices, enter *.facebook.* rather than "www.facebook.com"

Samsung Only

• Knox Key: Place a paid for Samsung Knox SDK license key here to utilize the policies below.
• Samsung License Required:
• Auto Start Up when Connected to Power: Device boots up fully when power is applied to USB connector instead of booting up to the battery charging UI. Only available on Samsungs using a license key.