Android Enterprise Work Managed Profile Configurations

Important: These profile configurations apply to Android Enterprise Work Managed devices. For other Android Plus device type profile configurations, see Android Plus Profile Configurations.

Always select the correct device type when creating new profiles. The available profile configurations change depending on the selected device type.

Security

Configuration Description
Antivirus Protection Enables antivirus protection on your devices.
Authentication Enforces administrator and user password policies.
Certificates Distributes digital certificates to your devices.
Factory Reset Protection Designates which Google accounts can access devices after a factory reset.
Out of Contact Determines an automatic action that occurs when a device has not connected to the deployment server for a specified time.
Single Sign-on Permits device users to authenticate once for many apps.
System Update Policy Controls when system updates can install on devices.

Restrictions

Configuration Description
Application Run Control Restricts which applications can run.
Browser (Android Enterprise) Manages internet browser security settings.
Browser Proxy (Android Enterprise) Specifies connection settings for the Google Chrome browser.
Firewall Configures advanced firewall policies to filter or reroute network traffic.
Restriction: Not supported for AMAPI-enrolled devices.
Lockdown Configures custom kiosk settings.
Phone Calls

Configures blocking of incoming and/or outgoing calls.

Web Filter Specifies which URLs device users can access.

Connectivity

Configuration Description
APN Configures Access Point Name (APN) settings.
Restriction: Not supported for AMAPI-enrolled devices.
SOTI VPN Sets up the SOTI VPN service.
VPN: F5 SSL Configures F5 SSL VPN settings.
VPN: IPSec Hybrid RSA Configure IPSec Hybrid RSA VPN settings.
VPN: IPSec Hybrid RSA Configure IPSec Hybrid RSA VPN settings.
VPN: IPSec Xauth PSK Configures IPSec Xauth PSK VPN settings.
VPN: IPSec Xauth RSA Configures IPSec Xauth RSA VPN settings.
VPN: L2TP Configures L2TP VPN settings.
VPN: PPTP Configures PPTP VPN settings.
VPN: Pulse Secure Configures Pulse Secure VPN settings.
Restriction: This configuration is not supported for AMAPI-enrolled devices.
VPN: NetMotion Configures NetMotion VPN settings.
Wi-Fi Configures Wi-Fi settings.

See Native VPN Payload Configuration For Android Work Managed Devices for instructions on adding a native VPN payload to Android Enterprise Work Managed devices.

Email & Others

Configuration Description
Bookmarks Adds bookmarks to the default browser on your devices.
Device Inactivity Profile Specifies device-side actions to execute when Android Work Managed devices become inactive.
Email: Exchange for Gmail Configures email account settings for your devices.
Managed Google Play Configures device user's ability to update Managed Google Play apps.
OEMConfig Sets OEM-specific configurations for Android Enterprise devices.
Task Scheduler Schedules execution of device scripts.
Wallpaper Configures wallpaper on Android Classic and Enterprise devices.

SOTI Apps

Configuration Description
Settings Manager Controls which device settings users can change while a device is in lockdown.
SOTI Hub Configures settings for the SOTI Hub app.
SOTI Surf Configures settings for the SOTI Surf browser app.