Android Fully Managed

A fully managed Android device provides access to additional restrictions, options, and commands to further tailor the end-user experience while retaining full control over the device. To put the device in fully managed mode, an administrator will first need to enroll the device using a special enrollment flow.

Set Up Android Device Ownership

Caution: A factory reset will erase all data from the selected device(s). This action cannot be undone. As an extra security precaution, you can check 'Remove factory reset protection' to allow the device to be factory reset for reconfiguration.

In KACE Cloud MDM:

  1. In the Devices section, select a device.
  2. In the right panel, under the More Actions dropdown, select Factory Reset.

On device:

Turn on device and move through any cursory screens (start, wi-fi, terms and conditions), until you are prompted for your Google Account email.

Caution: The version minimum required for afw#kace enrollment is Android 6.

  1. In the 'Email or phone' field, enter afw#kace, then click Next.
    • Enable or disable items in list of Googles Services, then click Next.
  2. On the Android Enterprise screen, click Install.
  3. When prompted to approve the installation, click Install.
  4. Once downloaded, click Set Up Device.
    • Agree to Terms and Conditions.
  5. On 'Set up work device' screen, click Next.
  6. Consent to the privacy policy, then click OK.

At this point device ownership is set up. The device will check for the Android Work environment, and once complete, the KACE Cloud MDM app will be on the device.

To enroll the device:

  1. Open the KACE Cloud MDM app on the device.
  2. Click Enroll Device.
  3. Grant permission to administrator by clicking Continue.
    • You’ll be automatically taken to Device Settings.
  4. Toggle the ‘Allow permission’ setting to ON, then back out of Device Settings.
  5. Enter the company’s subdomain, then click Next.

IMPORTANT: If you are never prompted for your company subdomain during the enrollment process, the Google Play services on the factory default image of the device may be out of date. See Known Issues in April Release Notes.

Once enrollment is complete:

  1. Sign in to the KACE Cloud MDM Admin Portal to finalize your device enrollment.
  2. Once the ‘Device Enrolled’ message is shown, click Set Passcode.
  3. Click PIN.
  4. Enter a 4-digit PIN number, then click Continue.
  5. Re-enter PIN number, then click OK.

The device is now ready to be assigned to a user.

Manage Device Ownership

After activating Android device ownership, the device can be managed using KACE Cloud MDM.

In the devices section, a fully managed device is identifiable by the device icon next to the Android OS icon.

In the right panel, click the Android dropdown to see all available actions for Android devices.

Android Options Library

The Android Options library lets an admin build more granular sets of configurations for use on fully managed Android devices.

  1. In the Library, select Android Options.
  2. Click Add New.
  3. Name the new Android Option and make selections.
  4. Click Save.

Restrictions (Android Fully Managed Only)

There are some restrictions only available for fully managed Android devices, which are indicated by an icon when adding or editing Restriction sets.

Set Passcode

A new passcode will be set for the selected device and any existing passcode will be replaced. The function is available to both standard and fully managed devices.

  1. In the Devices section, select a device.
  2. In the right panel, click the Android dropdown.
  3. Select Set Passcode.
  4. Enter new passcode, then click Save.

Install Agent App

This function will install the latest version of the KACE Cloud Android Agent to the selected device. The function is available to both standard and fully managed devices.

  1. In the Devices section, select a device.
  2. In the right panel, click the Android dropdown.
  3. Select Install Agent App.
  4. Click Confirm.

Reboot Device (7.0+)

The reboot command will attempt to restart the selected device. The function is available only for fully managed devices.

  1. In the Devices section, select a device.
  2. In the right panel, click the Android dropdown.
  3. Select Reboot Device.
  4. Click Confirm.