MDM Cloud Wiki

%mdmname% Wiki

  • Docs
  • Languages iconEnglish
    • Italiano

›Domande frequenti

Introduzione

  • Overview
  • Definitions and Terms
  • Requirements
  • Management scenarios
  • Languages

Configurazione

  • Overview
  • Passport generation
  • ["mobile"]~Apple

    • Overview
    • ["mobile"]~Apple Push Notification Service configuration
    • ["mobile"]~Apple Deployment Program configuration
    • ["mobile"]~Apple Volume Purchase Program configuration
    • ["mobile"]~iOS, iPadOS and tvOS device setup
    • ["edu","mobile"]~Apple Classroom integration
    • ["mobile"]~Apple Autodiscovery setup for user-driven enrollment

    Google

    • Overview
    • Android Enterprise setup
    • ["mobile"]~Android mobile device setup
    • ["mobile"]~Configuration via Android Configurator
    • ["mobile"]~Samsung Knox Mobile Enrollment
    • Pre-installed Agent configuration
    • ["mobile"]~Android Zero-touch sync
    • ["noWhitelabel","mobile"]~Android Enterprise provisioning customizations

    Microsoft

    • Overview
    • Configure MDM in Azure Entra ID tenant
    • Configure Microsoft Autodiscovery
    • Windows Autopilot enrollment
    • Azure Entra ID login enrollment
    • Office enrollment
    • Windows Settings > Enroll only in device management
    • Windows Configuration Designer for imaging
    • Shortcut commands for Standard provisioning
    • Enrollment script for already-logged Azure Entra ID devices
  • General settings
  • ["edu"]~Classes

Utenti

  • Overview
  • Single User detail
  • Azioni degli utenti

    • Overview
    • Change Name
    • Change role
    • Change Email
    • ["edu"]~Manage classes
    • Change password
    • Enable user account
    • Disable user account
    • Change avatar
    • Reset Avatar
    • Bind Devices
    • Unbind devices
    • Tag
    • Remove tags
    • ["mobile"]~Enable Apple User Enrollment
    • Delete user
    • Verify account
  • CSV Users' import
  • Operator's role overview

Dispositivi

  • Overview
  • Device detail
  • Azioni dei dispositivi

    • Overview
    • Device Info
    • Refresh Info
    • Bind User
    • View Screen
    • Change Device Name
    • ["mobile"]~Install/Update App (Apple)
    • ["mobile"]~Remove App (Apple)
    • ["mobile"]~Install/Update App (Google Play)
    • ["mobile"]~Remove App (Google Play)
    • Install Apk
    • Remove Apk
    • ["mobile"]~Install eBook, PDF
    • ["mobile"]~Remove eBook, PDF
    • ["mobile"]~Assign DEP Profile
    • ["mobile"]~Enable Activation Lock
    • ["mobile"]~Disable Activation Lock
    • Shutdown
    • Upload File
    • Remove File
    • Install Certificate
    • Remove Certificate
    • Schedule Os Updates
    • ["mobile"]~Reconnect Google Play Managed Account
    • Keypress
    • Notification
    • Input Video Source
    • Audio Settings
    • Output Video
    • PC Module Power
    • Wake other devices over LAN
    • Standby LCD
    • Volume
    • ["mobile"]~Factory Reset Protection
    • Clean Usage Data
    • Play a Sound
    • Fetch location
    • Set passcode
    • Lock Screen
    • Clear passcode
    • ["mobile"]~Clear Local Restrictions
    • Enable Lost Mode
    • Disable Lost Mode
    • Wipe
    • Restart
    • Unenroll
    • Unenroll and Delete
    • Tag
    • Remove Tag
    • ["mobile"]~Check support coverage
    • ["mobile"]~Set time zone
    • ["mobile"]~Install VPP App
    • ["mobile"]~Unassign VPP License
    • ["mobile"]~Enable Bluetooth
    • ["mobile"]~Disable Bluetooth
    • ["mobile"]~Refresh eSIM Cellular Plans
    • ["mobile"]~Enable Hotspot
    • ["mobile"]~Disable Hotspot
    • ["mobile"]~Enable Data Roaming
    • ["mobile"]~Disable Data Roaming
    • ["mobile"]~Start OS Update
    • ["mobile"]~Add Space
    • ["mobile"]~Logout User / Space
    • ["mobile"]~Remove User / Space
    • ["edu","mobile"]~Detach Passport
    • ["mobile"]~Remove Service Accounts
    • Disable Emergency Mode
    • Install MS Store App
    • Install MSI package
    • Install .exe
    • Remove MS store apps
    • Custom Command
  • CSV Device's Placeholders import

Profili

  • Overview
  • Generale

    • Overview
    • Profile name
    • Profile description
    • Apply to all device's spaces
    • Automatically Remove Profile
    • Limit on dates
    • Limit on WiFi in range
    • Limit on Public IPs

    Codice

    • Overview
    • Minimum passcode length
    • Maximum passcode age
    • Passcode history
    • Maximum number of failed attempts
    • ["mobile"]~Allow simple value
    • ["mobile"]~Require Passcode on Device
    • ["mobile"]~Require alphanumeric value
    • ["mobile"]~Minimum number of complex characters
    • ["mobile"]~Maximum grace period for device lock
    • Device Passcode Policy
    • ["mobile"]~Profile Passcode Policy
    • ["mobile"]~Allow Unified Passcode
    • ["mobile"]~Allow Biometrics Unlock
    • ["mobile"]~Allow Google Smart Lock and other trust agents
    • Allow Notifications in Lock Screen
    • Allow Unredacted Notifications in Lock Screen
    • Allow Camera in Lock Screen
    • Lockscreen time-out
    • Strong Authentication time-out
    • Definition for "Complex" Passcode Policy

    Restrizioni

    • Overview
    • ["mobile"]~Allow device Sleep
    • Allow use of camera
    • Allow screenshots and screen recordings
    • ["mobile"]~Allow AirPlay and View Screen in Classroom
    • ["mobile","edu"]~Force Unprompted AirPlay and View Screen in Classrooms
    • ["mobile","edu"]~Automatically join Classroom classes without prompting
    • ["mobile","edu"]~Require teacher permission to leave Classroom unmanaged classes
    • ["mobile","edu"]~Allow Classroom to lock to an app and lock the device without prompting
    • Allow use of system browser
    • ["mobile"]~Accept Cookies
    • ["mobile"]~Allow Popups
    • ["mobile"]~Enable JavaScript
    • ["mobile"]~Force fraud warning
    • ["mobile"]~Enable Autofill
    • Allow messaging
    • ["mobile"]~Allow News
    • ["mobile"]~Allow use of "iTunes Music Store"
    • ["mobile"]~Allow iBooks Store
    • ["mobile"]~Allow explicit sexual content in iBooks Store
    • ["mobile"]~Allow Podcasts
    • ["mobile"]~Allow Music service
    • ["mobile"]~Allow Radio service
    • ["mobile"]~Allow modifying local restrictions
    • Allow Airplane Mode
    • Allow modifying wallpaper
    • ["mobile"]~Allow modifying device name
    • Allow adjusting Volume
    • Allow unmuting Microphone
    • App Home launcher
    • Allowed Accessibility Tools
    • Allow Erase All Content And Settings
    • Allow modifying account settings
    • Allow Google account modification
    • Allow asking Google Account screen after enroll
    • ["mobile"]~Allow Temporary Session on Shared iPad
    • ["mobile"]~Allow Auto Correction
    • ["mobile"]~Allow Auto Correction
    • ["mobile"]~Allow Spell Check
    • ["mobile"]~Allow keyboard shortcuts
    • Allow continuous path keyboard
    • Allow playback of explicit music, podcasts, and iTunes U content
    • ["mobile"]~Allow pairing with Apple TV Remote app
    • ["mobile"]~Software Updates Delay
    • Allow switch user
    • Force Temporary Session mode
    • Force Select User screen mode
    • Allow temporary login to guest
    • Allow temporary login via account or SSO
    • Allow login to existing User Spaces
    • Force adding Google Account on User Spaces
    • Force Date & Time Automatically
    • ["mobile"]~Allow installing configuration profiles
    • Location services level Precision
    • Force Location services
    • Allow Work profile provisioning
    • Allow Safe Boot
    • Allow use of Gaming platforms
    • ["mobile"]~Allow adding Game Center friends
    • ["mobile"]~Allow multiplayer gaming
    • ["mobile"]~Allow sending diagnostic and usage data to Apple
    • Allow Debug
    • Allow Status Bar
    • Pause limit on Work Profile
    • Allow Ambient Display feature
    • Allow modifying Brightness
    • Keep Screen On during charge
    • Lock the touchscreen
    • Lock the Remote
    • Lock the Key Pad
    • Lock the screen after booting up
    • Allow app installation
    • ["mobile"]~Allow app installs through App Store
    • ["mobile"]~Allow system app removal
    • ["mobile"]~Allow Samsung Galaxy Apps store
    • Allow removing apps
    • ["mobile"]~Allow automatic app downloads
    • Allow Auto Unlock
    • ["mobile"]~Allow In-App Purchase
    • Allow apps control
    • ["mobile"]~Whitelisted iOS Apps
    • ["mobile"]~Blacklisted App iOS
    • Whitelisted App Android
    • Blacklisted App Android
    • ["mobile"]~Autonomous Single App Mode
    • Rating apps
    • Allow Personal Android Apps
    • ["mobile"]~Rating movies
    • ["mobile"]~Rating tv shows
    • ["mobile"]~Allow managed apps to store data in iCloud
    • ["mobile"]~Allow backup of business books
    • ["mobile"]~Allow notes and highlights synchronization of business books
    • ["mobile"]~Allow trusting new enterprise app authors
    • ["mobile"]~Allow Enterprise App Trust Modification
    • ["mobile"]~Require iTunes password for all purchases
    • ["mobile"]~Allow pairing with non-Configurator hosts
    • ["mobile"]~Allow Siri
    • ["mobile"]~Allow Siri Server Logging
    • ["mobile"]~Show user-generated content in Siri
    • ["mobile"]~Enable Siri profanity filter
    • ["mobile"]~Allow Siri while device locked
    • ["mobile"]~Allow Dictation
    • Whitelisted Apps on Personal Google Play
    • Blacklisted Apps on Personal Google Play
    • Allow Unknown sources
    • Allow AutoFill Passwords
    • ["mobile"]~Require Face ID authentication before AutoFill
    • ["mobile"]~Allow setting up new nearby devices
    • ["mobile"]~Allow Password Proximity Requests
    • Allow Airdrop Passwords
    • ["mobile"]~Allow iCloud Keychain
    • ["mobile"]~Allow Handoff
    • ["mobile"]~Allow My Photo Stream
    • ["mobile"]~Allow iCloud Photo Sharing
    • ["mobile"]~Allow iCloud Photo Library
    • ["mobile"]~Allow iCloud documents and data
    • ["mobile"]~Allow AirPrint
    • ["mobile"]~Allow discovery of AirPrint printers using iBeacons
    • ["mobile"]~Require TLS for AirPrint printers
    • ["mobile"]~Allow storage of AirPrint credentials in Keychain
    • ["mobile"]~Force Airplay outgoing requests pairing password
    • ["mobile"]~Force Airplay incoming requests pairing password
    • ["mobile"]~Allow predictive keyboard
    • ["mobile"]~Allow voice dialing while device is locked
    • Allow printing
    • Allow VoIP Calls
    • Allow Cloud backups
    • ["mobile"]~Force encrypted backups
    • ["mobile"]~Allow users to accept untrusted TLS certificates
    • ["mobile"]~Limit AD tracking
    • ["mobile"]~Allow Touch ID / Face ID to unlock device
    • ["mobile"]~Allow modifying Touch ID fingerprints / Face ID face
    • ["mobile"]~Allow Passcode modification
    • ["mobile"]~Allow Siri Suggestions
    • ["mobile"]~Allow Wallet while locked
    • ["mobile"]~Show Control Center in Lock screen
    • ["mobile"]~Show Notification Center in Lock screen
    • ["mobile"]~Show Today view in Lock screen
    • ["mobile"]~Allow editing notification settings
    • ["mobile"]~Allow Apple personalized Advertising
    • ["mobile"]~Allow "Find My"
    • ["mobile"]~Allow "Find My Friends"
    • ["mobile"]~Allow modifying "Find My Friends" settings
    • ["mobile"]~Documents from managed sources appear in unmanaged destinations
    • ["mobile"]~Documents from unmanaged sources appear in managed destinations
    • ["mobile"]~Allow managed apps to edit unmanaged contacts
    • ["mobile"]~Allow unmanaged apps to read managed contacts
    • ["mobile"]~Allow background sync while roaming
    • ["mobile"]~Allow Personal Hotspost Modification
    • ["mobile"]~Allow modifying cellular plan settings
    • ["mobile"]~Allow modifying eSIM settings
    • ["mobile"]~Allow modifying cellular data app settings
    • ["mobile"]~Allow app clips
    • ["mobile"]~Allow OTA PKY updates
    • ["mobile"]~Allow WiFi state modification
    • Allow Passcode
    • Allow location sharing
    • Allow modifying certificates
    • Allow modifying cell broadcast settings
    • Allow data roaming
    • Allow network reset
    • Allow outgoing calls
    • Allow configuring mobile networks
    • Force WiFi power on
    • Allow Tethering
    • Allow USB Mass Storage Mode
    • Bluetooth State
    • Allow Bluetooth modification
    • WiFi Sleep Policy
    • WiFi Whitelisting
    • WiFi "RECOVERY3847"
    • Unlock WiFi Settings Password
    • Allow configure Private DNS
    • Allow VPN creation
    • ["mobile"]~Allow AirDrop
    • ["mobile"]~Treat AirDrop as unmanaged destination
    • Offline Emergency Mode
    • Allow external media
    • Allow USB drive access in "Files" app
    • ["mobile"]~Allow network drive access in "Files" app
    • ["mobile"]~Allow USB accessories while device is locked
    • ["mobile"]~Allow unpaired devices to boot in recovery
    • ["mobile"]~Allow pairing with Apple Watch
    • ["mobile"]~Allow auto unlock with Apple Watch
    • ["mobile"]~Force Apple Watch wrist detection
    • Allow NFC
    • ["kindermann"]~WOL Status
    • ["kindermann"]~Block "Network" system setting pane
    • ["kindermann"]~Block "Wifi" system setting pane
    • ["kindermann"]~Block "Ethernet" system setting pane
    • ["kindermann"]~Block "Hotspot" system setting pane
    • ["kindermann"]~Block "Language" system setting pane
    • ["kindermann"]~Block "Apps" system setting pane
    • ["kindermann"]~Block "Control" system setting pane
    • ["kindermann"]~Block "Source setting" video setting pane
    • ["kindermann"]~Block "Setting" video setting pane
    • ["kindermann"]~Block "Check update" button
    • ["kindermann"]~Block "Auto heck update" toggle
    • ["kindermann"]~Block "Change screen lock password" option
    • ["kindermann"]~Block "Boot lock screen" button
    • ["kindermann"]~Block "Restore factory settings" button
    • ["kindermann"]~Block "Power On time" button
    • ["kindermann"]~Block "Power Off time" button
    • ["kindermann"]~Block "Wake on Lan" button
    • ["kindermann"]~Block "Lock IR remote" button
    • ["kindermann"]~Block "Lock touch" button
    • ["kindermann"]~Block "Lock front panel keys" button
    • Allow offline unenroll
    • Set minimum Wifi security level
    • Cross Profile Packages
    • Set Grant Key Pair to App
    • Allow Cloud Private Relay
    • Allow end task in task manager
    • MSI Allow user control over install
    • MSI always install with elevated privileges
    • Allow modifying WiFi settings
    • Allow store purchases
    • Allow applications installation only in the system's volume

    Certificati

    • Overview
    • File
    • Password
  • ["mobile"]~CT (Certificate Transparency)
  • Network

    • Overview
    • Service Set Identifier (SSID)
    • Security Type
  • Global HTTP Proxy
  • Filtro Contenuti Web

    • Overview
    • Whitelist URL
    • Blacklisted URLs

    App Lock

    • Overview
    • App ID (Apple)
    • App IDs
    • Force opening of the first App
    • Additional Services or Apps ID to permit in background
    • Single App Unlock Password
    • Settings enforced when in App Lock
  • ["mobile"]~Conference Room View
  • Web Lock

    • Overview
    • Single App Unlock Password
    • Main Site URL (Homepage)
    • Settings enforced when in Web Lock
    • Inactivity Timeout to refresh main page
  • VPN Always-ON
  • Cellular
  • Wallpaper
  • Lock Screen Message
  • Permitted Google Accounts
  • ["mobile"]~Home Screen Layout
  • ["mobile"]~AirPlay Security
  • ["mobile"]~Airplay
  • ["mobile"]~Notifications
  • ["mobile"]~Airprint
  • ["mobile"]~Associated Domains
  • ["mobile"]~VPN
  • ["mobile"]~VPN per App
  • ["mobile"]~Calendar
  • ["mobile"]~Contacts
  • ["mobile"]~Subscribed Calendars
  • Monitoring
  • ["mobile"]~Geofence
  • Power management
  • Video sources management
  • Video Settings
  • DNS Settings
  • ["mobile"]~Mail
  • ["mobile"]~Account Google
  • ["mobile"]~Exchange ActiveSync
  • ["mobile"]~Single Sign-On
  • ["mobile"]~Extensible SSO
  • ["mobile"]~SCEP
  • ["mobile"]~Network Usage Rules
  • ["mobile"]~DNS Proxy
  • ["mobile"]~LDAP
  • ["mobile"]~TV Remote
  • ["mobile"]~Font
  • ["mobile"]~Custom profile
  • ["mobile"]~Certificate Revocation
  • ["mobile"]~Samsung Knox
  • Proxy
  • Bitlocker
  • Windows Config
  • Security
  • Custom CSP Policies
  • ADMX Policies

Gruppi

  • Overview
  • Groups
  • Profiles

Apps & Media

  • Overview
  • Regole Gestite

    • Overview
    • Assign and install apps automatically
    • Runtime permissions
    • Managed configurations
  • ["mobile"]~Apple VPP
  • ["mobile"]~Google Play

Smart Workflows

  • Overview
  • ["mobile"]~Deny use of devices with inserted SIM

Catalogo Privato

  • Overview
  • Organization's resources
  • ["edu"]~Teachers' resources
  • Categories
  • Apps lists

Directory Sync

  • Overview

SSO

  • Overview
  • ["mobile"]~SSO Microsoft 365 su iOS ed iPadOS

Altro

  • Overview
  • App search modal
  • Wildcard variables
  • Emergency mode
  • Log and monitoring compatibilities
  • Analytics
  • Security Logs
  • ["mobile"]~Geofence
  • Action Logs
  • Access logs
  • Firewall configurations
  • Platform security
  • ["mobile"]~Knox Platform for Enterprise
  • ["noWhitelabel"]~Release notes
  • ["mobile"]~Enable remote control for Zebra devices
  • ["mobile"]~Enable remote control for Motorola devices
  • ["mobile"]~Android Enterprise OEMConfig compatibility

Domande frequenti

  • Overview

Sicurezza

  • Central
  • Firewall rules
  • Hosts
  • IPs
  • Websites

Q&A (Overview)

[mobile]

Is it possible to have Apple School Manager and Google Classroom synched together?

With %whitelabelText2% you can set Apple School Manager with FTP upload and Google Workspace in download or viceversa.

I set Schedule Os Updates to "Automatic" but nothing appens. What I have to do?

Schedule Os Updates feature is handled by the OS and manufacturers.

Even though the policy has been set as “Automatic”, some manufacturers just verify if there is any OS updates and ask the user for a confirmation, others could launch the update directly.

I revoked and app but it still present on the device. What I have to do?

If you revoke an app it won't be unistalled automatically. Use Remove App action to uninstall an app.

I have approved an App but I can't see that on devices. What I have to do?

It is important to understand different levels of Mobile Application Management designed in %mdmName%.

  1. Licenses can be approved or revoked on entire fleet by the organization
  2. Licenses can be assigned or unassigned to an account or a device
  3. App can be installed or uninstalled
  4. App can be disable with whitelist or blacklist

Every of these levels of management works simultaneous.

So first of all, check if you have assigned and installed the app.
Secondary, check Profiles if you have included the app in any app whitelist or blacklist.

We couldn’t find the app in Management > Apps & Media > Google Play but we could find it in stadard Google Play. Why?

Google Play Managed is a special version of Google Play, developers have to accept to distribute their app on the Google Play Managed to make it available.

Maybe, in this case the developer hasn’t accepted terms or hasn’t selected the checkbox to distribute the app on the Managed version of Google Play.

In addition, the app could be an open beta version so you need an invite to see that.

[/mobile]

[edu]

Where I have to go to access in Chimpa Teach webapp?

Just login with a teacher account in the %whitelabelText2% login screen of your cloud instance.

How to setup Chimpa Home?

Chimpa Home has no setup. School's Admin have only to enable Chimpa Home on %whitelabelText2% Admin > General Settings and families have to download the Chimpa Home app and register themselves.

[/edu]

I have uploaded a file but I cannot see using Remove file action. What I have to do?

MDM procedures are async. So the server can receive information with delay and updates the list of files later. If you want to force the sync you can use “Refresh info” action and check, on Actvity tab, when the device has received and processed this action. When the action has shown as Delivered status means that server have been syncronized with the device.

So you’ll see “Media” tabs with the files in the MDM directory and you can see those also under “Remove file” action.

Is it possible to batch rename users and devices?

Users’ batch rename is NOT allowed for privacy reasons: delete all the users and import new ones via csv or other directory sync methods.

*Renaming devices is possible:

[edu]

  • *In %whitelabelText2% Admin > Global Settings > General enables "Rename students' Devices automatically”

[/edu]

  • Import Users and new bindings via csv
  • Ones you have imported users and bindings, devices will be renamed with default pattern. If you want a custom pattern go in Management > Devices, select all, use the Multi action menu > Change device Name. You can use wildcard parameters listed in the Change Device Name modal.

How can I change settings on 2 factor authentication (2FA)?

2FA settings are available inside their own Profile section, in the top right corner of the %whitelabelText2% Panel or %whitelabelText2% Admin.
Operators [edu] and Teachers [/edu] can enable or disable the 2FA.
Admins are enforced to use at least 2FA via email.
All these users can enable Authenticator app support.

← ["mobile"]~Android Enterprise OEMConfig compatibilityCentral →
MDM Cloud Wiki
%docs%
%getstarted%
%more%
%officialwebsiteurl%
Copyright © 2024 %organizationname%