Android Enterprise
Android Enterprise (formerly Android for Work) is a platform in which organizations can manage corporate-owned or personal work-enabled Android devices. It works in conjunction with many Enterprise Mobility Management platforms to give administrators the ability to manage and restrict settings, track device location, remote wipe devices, and provide users with mobile access to corporate resources. The U.S. National Institute of Standards and Technology (NIST) lists several high-level threats and vulnerabilities that are prevalent in mobile devices, and it recommends that enterprises utilize a centralized mobile device management platform.[1] With the initial launch of Android for Work in 2015, Google hoped to address security and fragmentation issues that are prevalent in the Android landscape[2], and it continues to evolve the Android Enterprise platform with each new release of Android.
Enrollment[edit]
There are multiple methods to enroll devices in Android Enterprise. After a device is powered on for the first time (or after a factory reset), there are two methods by which it can be enrolled. Tapping the word "Welcome" seven times prompts the user to scan an EMM-generated QR code to begin setup. Alternatively, when prompted to enter the email address of a Google Account[3] during initial device setup, the user can enter their EMM-specific identifier (e.g. afw#NameOfEMMProvider) to begin the enrollment process. These two methods can only be used for enrolling in a Corporate owned Android Enterprise mode. For Bring your own device (BYOD) users, the enrollment process begins with downloading the EMM provider's app and proceeding through its own enrollment process.
Modes[edit]
Android Enterprise devices can be enrolled in one of several modes.
BYOD - For organizations who wish to improve productivity and efficiency by permitting employees to use their personal devices, there is an increased risk of leaking confidential information[4]. To provide access to corporate resources for work-related tasks, the BYOD mode provides a secured profile where corporate-approved apps and documents can be stored. DLP policies can also limit the movement of data into and out of this profile. Enterprise administrators can send a remote wipe command to remove the Work profile without affecting the user's personal information and apps.[5]
Corporate owned - This mode gives the Android Enterprise administrator complete control over the device, but gives users the benefit of a fully-featured Android device. Apps can be approved by the administrator and downloaded to the device through the Google Play Store without the user having to use their own Google account. Administrators can also set device policies such as password/PIN requirements, screen timeout settings, enforcing GPS location, etc.
Corporate owned single use - Devices enrolled in this mode operate in a kiosk-like environment, where only a single app can be accessed. It is useful for job-specific applications and those used by customers.[6] Administrators can still control settings through their EMM platform while the end user is completely locked out of the device settings.
References[edit]
- ↑ "Guidelines for Managing the Security of Mobile Devices in the Enterprise" (PDF). Retrieved 30 April 2018.
- ↑ Kapko, Matt. "Android for Work Pushes Google Further Into Enterprise".
- ↑ "google-account-for-my-business-in-detail". retargetingnews.com. Retrieved 9 June 2023.
- ↑ "Penn State WebAccess Secure Login:". ieeexplore.ieee.org.ezaccess.libraries.psu.edu.
- ↑ Bayton, Jason (7 April 2017). "What is Android enterprise and why is it used?".
- ↑ "Innovate your organization with Android Enterprise - RuggedInformer.com". 30 January 2018.
External links[edit]
This article "Android Enterprise" is from Wikipedia. The list of its authors can be seen in its historical and/or the page Edithistory:Android Enterprise. Articles copied from Draft Namespace on Wikipedia could be seen on the Draft Namespace of Wikipedia and not main one.
