Android

You can perform the following actions:

• Enroll Device

• Add Groups

• CSV

• Move to Group

• Message

• Lock

• Push Assigned Apps

• Reset Passcode

• Select Wipe

• Full Wipe

• Remove

Enroll Device

Select one or more devices and click Enroll Device.

Android devices can be enrolled as a Work-Managed Device and User-Owned Device based on your requirements.

You must configure a connection to Android for Work before you can enroll Android devices.

Selecting the Default Group

When you enroll an Android device, it is automatically assigned to the default group. The same default group applies to both user-managed and work-managed enrollments, but note that you can move devices to a different group at any time.

1. Go to MDM > Devices.

2. Click the Android icon.

3. Click Enroll Device.

4. Use the Assign to group field to select a default group. Newly enrolled devices will be placed in this group.

Work-managed Device

A work-managed device allows the IT administrator to have full control over the device. A work-managed device can be configured to only allow specific apps defined by the administrator to be installed on the device. Only the apps specified by the administrator will be visible in the Google Play Store.

Enrolling an Android device as a work-managed device is a two-step process: first, the device must be wiped (assuming it is not a brand new device), then it must be enrolled during the initial device setup. There are three methods for enrolling the device: you can enter an enrollment code, you can scan a QR code, or you can enter an activation code. Note that each of these methods has different prerequisites.

Step 1: Reset the device to factory defaults

Unless the device is brand new, out of the box, it will need to be wiped of all user data before it can be configured as a work-managed device.

How to reset the device depends on the model of device-consult the device instructions.

Step 2 (option 1): Enter the DPC Identifier during device setup

To use this method, the device must run Android 6.0 (Marshmallow) or above.

1. Switch on the device, then wait until it displays the initial language selection screen.

2. Select the language you want to operate in.

3. Tap Start.

4. In the Wi-Fi screen, select a wireless network and provide the credentials necessary to connect to it. Once you are connected, tap Next.

5. Agree to the Terms and Conditions, then tap Next.

6. In the Add your account screen, enter afw#deepfreeze into the Email or phone field. Tap Next.

7. Follow the prompts on the device to continue device configuration. If prompted, download and install the Deep Freeze MDM app.

8. In the Enroll in Deep Freeze MDM screen, do one of the following:

   • Enter the enrollment code displayed by the Deep Freeze Cloud Console at MDM > Devices > Enrollment > Android under the Using DPC Identifier heading, then tap Enroll this device.

   • Tap the camera icon to activate the camera, then use the camera to scan the QR code displayed by the Deep Freeze Cloud Console at MDM > Devices > Enrollment > Android under the Using DPC Identifier heading. Note that this page displays two QR codes; the smaller one is required for this procedure.

9. Follow the prompts on the device to complete device configuration.

Step 2 (option 2): Scan the Deep Freeze QR code during device setup

To use this method, the device must run Android 7.0 (Nougat) or above.

1. Switch on the device, and wait until it displays the initial language selection screen.

2. Select the language you want to operate in.

3. Tap the device screen six times. The device displays the QR code setup screen.

4. Touch Next to proceed to the Get connected screen.

5. Select a wireless network and provide the necessary credentials to connect to it.

6. Once the device is connected, it will active the camera. Use the camera to scan the QR code displayed by the Deep Freeze Cloud Console at MDM > Devices > Enrollment > Android under the Using QR Code heading. Note that this page displays two QR codes; the larger one is required for this procedure.

7. Follow the prompts on the device to complete device configuration.

Step 2 (option 3): Generate and use an activation code to enroll the device

This method is only available to devices running Android 5.x (Lollipop).

1. Go to MDM > Devices.

2. Click the Android icon.

3. Click Enroll Device.

4. Click the Work Managed Devices tab.

5. Enter your G Suite administrator email address into the Enter your work email address field.

6. Click Generate. Deep Freeze Cloud Console generates a numerical Activation Code and displays it underneath the email address. Record this code; it will be required when enrolling the device. Note that the same code can be used to enroll multiple devices.

7. Switch on the device, then wait until it displays the initial language selection screen.

8. Select the language you want to operate in.

9. Tap Start.

10. In the Wi-Fi screen, select a wireless network and provide the credentials necessary to connect to it. Once you are connected, tap Next.

11. Agree to the Terms and Conditions, then tap Next.

12. In the Add your account screen, tap the menu icon (the three vertical dots at the top right) and select Set up work device.

13. Enter the email address you used to generate the activation code into the Email address field, and the generated activation code into the Activation code field. Tap Set Up.

14. You may be prompted to encrypt your device. If so, tap Encrypt, then follow the instructions to continue. Note that your device will reboot as part of this process.

15. Follow the prompts on the device to continue device configuration. If prompted, download and install the Deep Freeze MDM app.

16. If the device runs Android 5.0 or 5.1, you must update the Google Play Store before enrolling in Deep Freeze MDM. For other versions of Android, skip this step.

    1. When the Enroll in Deep Freeze MDM screen appears, skip the enrollment process. Follow the prompts to complete device configuration.

    2. Launch the Play Store.

    3. Under the Settings menu, tap Play Store version. The Play Store will update itself to the latest version.

    4. Close the Play Store.

    5. Open the Deep Freeze MDM app.

17. In the Enroll in Deep Freeze MDM screen, do one of the following:

    • Enter the enrollment code displayed by the Deep Freeze Cloud Console at MDM > Devices > Enrollment > Android under the Using DPC Identifier heading, then tap Enroll this device.

    • Tap the camera icon to activate the camera, then use the camera to scan the QR code displayed by the Deep Freeze Cloud Console at MDM > Devices > Enrollment > Android under the Using DPC Identifier heading. Note that this page displays two QR codes; the smaller one is required for this procedure.

18. Follow the prompts to complete device configuration.

User-owned Device

A user-owned device allows the user to have complete control over the mobile device. The user can install or uninstall apps in addition to the apps installed by the administrator or change settings as required. A device owned by the organization can also be configured as a user-owned device.

Complete the following steps on the Android device:

1. Go to the Google Play Store.

2. Search for Deep Freeze MDM.

3. Click Install.

4. Launch the Deep Freeze MDM app.

5. Specify the network ID in the format XXX-XXX-XXXX. Alternatively, you can also scan the QR code.

6. Click Enroll this device.

Sending Android Enrollment Invitation Emails

You can use Deep Freeze Cloud Console to send emails to users inviting them to enroll their Android devices as user-owned. The recipients will receive an email from Deep Freeze Cloud containing a URL that they can use to enroll their device. The recipient can also forward the email to other users.

Note: You must configure a connection to Android for Work before you can send enrollment invitations.

1. Go to MDM > Devices.

2. Click the Android icon.

3. Click Enroll Device.

4. Define the email recipients, and edit the content if desired:

   • Send link via – enter the email addresses of the recipients in this field. Separate addresses using a comma.

   • Message – The email will display the text in this field directly before the URL used to enroll devices. Edit the text as desired.

5. Click Send.

Add Groups

Select one or more devices and click Add Groups.

CSV

Select one or more devices and click CSV to export device information to a CSV format.

Move to Group

Select one or more devices. Click Move to Group and select the group from the drop-down list.

Message

You can use the Deep Freeze Cloud Console to send messages to devices. Such messages are displayed as push messages. Messages are not cached, however; if a recipient computer is powered down or no user is logged in when the message is received, the message will not appear on that computer.

Select one or more devices and click Message. Define the message text then click Send.

Lock

Select one or more devices and click Lock.

If a passcode has been specified on the device, a user must enter the passcode to unlock the device.

Push Assigned Apps

Select one or more devices and click Push Assigned Apps to re-install apps that are removed using Select Wipe. The apps that are selected in the group to which the mobile device belongs are re-installed.

Reset Passcode

Select one or more devices and click Reset Passcode.

Select Wipe

A select wipe action is used to remove all the apps that are installed on the device. The device configuration and all the settings are left unchanged.

Select one or more devices and click Select Wipe.

Full Wipe

A full wipe action is used to restore the device to its original settings.

Select one or more devices and click Full Wipe.

Remove

Select one or more devices and click Remove.