Create a policy using TinyMDM

The “Policies” tab is one of the most important in the software. It is where you can configure the applications, files and contacts that will be available on the devices, and also configure or restrict access to various settings. To create a new policy, go to the Policies tab and click on Create a policy.

The first step is to add users to the policy. Simply tick the box next to their name (or next to the group if several users belong to the same group). It is possible to create a policy without first creating any users, but this means that it will not apply to any devices. We therefore recommend that you create users first, following the tutorials below if necessary.

Tutorials: How to create a user / How to import a list of users from a CSV file

Under Device Policy, you can disable the user’s ability to unlock the screen by fingerprint and facial recognition, and choose different settings for passwords:

  • the type of password
  • minimum password size
  • password timeout
  • number of times a previously used password can be reused to access the device or work profile
  • maximum number of password errors before factory reset

Tutorial: Passwords management

In this sub-tab, you’ll find all the features related to your enterprise approved apps: public applications, private applications, web applications and the manufacturers applications. They all appear here, and you can manage them policy by policy.

In the Policy approved apps list, when an app is greyed out, it means that it has not yet been approved for this policy. To authorise an application in this policy, simply click on it, and it will turn green and be authorised.

By clicking on the menu at the top right of each application, you will find a number of options: approve / disapprove, install / uninstall, clear data, manage permissions, manage configurations, etc.

In the Advanced apps management drop-down list, you’ll find advanced settings for your applications.

Tutorials: Manage apps permissions, manage configurations, advanced apps management

Tutorial: Set up the secure browser

In this tab, you can manage the Wi-Fi configurations of your mobile devices. In particular, you can disable access to unsecured Wi-Fi networks or restrict Wi-Fi to networks registered on TinyMDM.

Tutorial: Wi-Fi networks management

This section covers the management of connectivity parameters:

  • Disable internet connection sharing
  • Disable Bluetooth
  • Disable NFC to beam out data from apps
  • Disable data roaming
  • Disable airplane mode
  • Disable mobile data settings
  • Select a preconfigured APN

Tutorial: APN configuration

From this section, you can add a CA certificate to validate the identity of an entity (website, email address, company, etc.) and links it to cryptographic keys via the publication of an electronic document.

Tutorial: CA certificate configuration

Tutorial: Define a VPN application

From this section, you can:

  • Select when Android OS will be updated: automatically, after midnight, or 30 days later
  • Prevent end users from adding their own Google account on the devices
  • Allow installation of all Play Store applications of added google account
  • Automatically install the remote control plugin when available
  • Prevent factory reset: when enabled, a temporary code will be displayed and the end user will need it to be able to reset his device.
  • Disable Google FRP or enable it and configure a Google recovery account. 
  • Disable camera
  • Block access to location settings
  • Manage geolocation: per policy (enable or disable) / per device
  • Disable usb files access
  • Disable screen capture
  • Hide policy change message
  • Set a volume level
  • Allow the device to start automatically when it is charging (Samsung only)
  • Modify the language of the device (Samsung only)
  • Modify device’s timezone
  • Allow TinyMDM to handle downloads via the network
  • Select the frequency at which device information is sent to the console

Tutorials: Manage Android OS updates / Prevent factory reset / Manage Google FRP / Geolocate a device

In this sub-tab, you can manage all the settings relating to the device’s screen:

  • Remove swipe screen to unlock
  • Set a wallpaper
  • Show user and device identifiers on device wallpaper
  • Set a sleep mode delay
  • Set brightness level: default/adaptative/specific
  • Set up a maximum speed beyond which the device screen will not respond (display only)
  • Disable user consent popup for remote control

In the last two sections Shared Contacts and Shared files, you can add or remove contacts and files on all the devices within the policy. You need to add contacts from the shared contacts tab (click here to learn more) and add files from the shared files tab (click here to learn more).

Tutorials: Share contacts / Share files