XenMobile

App lock device policy

The App lock device policy defines a list of apps that are allowed to run on a device, or a list of apps that are blocked from running on a device. You can configure this policy for both iOS and Android devices, but the exact way the policy works differs for each platform. For example, you cannot block multiple apps on an iOS device.

同样,对于iOS设备,您可以选择只有一个iOS app per policy. This means that users are only able to use their device to run a single app. They cannot do any other activities on the device except for the options you specifically allow when the app lock policy is enforced.

此外,iOS设备必须监督脓h App Lock policies.

Although the device policy works on most Android L and M devices, app lock does not function on Android N or later devices because Google deprecated the required API.

To add or configure this policy, go toConfigure > Device Policies. For more information, seeDevice policies.

iOS settings

Image of Device Policies configuration screen

  • App bundle ID:In the list, click the app to which this policy applies or clickAdd newto add a new app to the list. If you selectAdd new, type the app name in the field that appears.
  • Options:Each of the following options applies only to iOS 7.0 or later. For each option, the default isOffexcept for Disable touch screen, which defaults toOn.
    • Disable touch screen
    • Disable device rotation sensing
    • Disable volume buttons
    • Disable ringer switch

      When Disable ringer switch isOn, the ringer behavior depends on what position the switch was in when it was first disabled.

    • Disable sleep/wake button
    • Disable auto lock
    • Disable VoiceOver
    • Enable zoom
    • Enable invert colors
    • Enable AssistiveTouch
    • Enable speak selection
    • Enable mono audio
  • User Enabled Options:Each of the following options applies only to iOS 7.0 or later. For each option, the default isOff.
    • Allow VoiceOver adjustment
    • Allow zoom adjustment
    • Allow invert colors adjustment
    • Allow AssitiveTouch adjustment
  • Policy settings
    • 删除政策:Choose a method for scheduling policy removal. Available options areSelect dateandDuration until removal (in hours)
      • Select date:Click the calendar to select the specific date for removal.
      • Duration until removal (in hours):Type a number, in hours, until policy removal occurs. Only available for iOS 6.0 and later.

Android settings

Note:

You can’t block the Android Settings app by using the App Lock device policy.

Image of Device Policies configuration screen

  • App Lock parameters
    • Lock message:Type a message that users see when they attempt to open a locked app.
    • Unlock password:Type the password to unlock the app.
    • Prevent uninstall:Select whether users are allowed to uninstall apps. The default isOff.
    • Lock screen:Select the image that appears on the device’s lock screen by clicking Browse and navigating to the file’s location.
    • Enforce:Click eitherBlacklistto create a list of apps that are not allowed to run on devices or clickWhitelistto create a list of apps that are allowed to run on devices.

      Note:

      The XenMobile Server console includes the terms “blacklist” and “whitelist”. We are changing those terms in an upcoming release to “block list” and “allow list”.

  • Apps:ClickAddand then do the following:
    • App name:In the list, click the name of the app to add to the allow or block lists, or clickAdd newto add a new app to the list of available apps.
    • If you selectAdd new, type the app name in the field that appears.
    • ClickSaveorCancel.
    • Repeat these steps each app you want to add to the allow or block lists.
App lock device policy