Profile SettingsĮvery time you distribute a profile with policies and restrictions to some devices, the end user is notified to accept the Policy. But when Basic Integrity Check is selected, it is possible for devices to pass the Basic Integrity Check but not be Google certified. NOTE: Google Certification also checks for the device's Basic Integrity.

Here is an exhaustive list of Google certified devices. If this option is selected, the devices will be enrolled only if they are certified by Google.

Google certifies devices based on it's Compatibility Testing Suite, which contains basic requirements for Google to certify devices for enterprises. If an enrolled device fails Basic Integrity Check, the device will be removed from management and the data will be removed from the device. During enrollment, if the device fails Basic Integrity, Check, the device will not be enrolled. If any of the above conditions are true, the device fails the Basic Integrity Check. Basic Integrity Check failsĪndroid's Basic Integrity Check monitors if the device is Rooted, virtual device or contains a virtual ROM. Removing the device from management also removes the corporate data from the devices. MDM identifies rooted devices and upon selecting this option removes these devices from management. Therefore, organizations must not allow Rooted devices to access the corporate data, as this could lead to a data breach. Rooted devices gives users additional controls like removing profiles distributed by MDM or removing the device from MDM management itself. If the device is checked during enrollment, the device enrollment will fail. If the devices are found to be non-compliant with the option selected below, the device will be deprovisioned and data will be wiped from the device. The devices are checked during enrollment and during every scan. You can customize the following: Security Settings Remove devices whenĪdmins can use the following settings to ensure that corporate data is removed from devices if the device is compromised by any threat. Note: After enrollment, ME MDM app will be auto approved in Play Store and updated automatically if the default conditions are met. The app is installed in all the managed Android devices. To manage Android devices, you need to configure ME MDM app settings. Once the ManageEngine MDM app is installed, the App Catalog will be removed from the devices. Users should enter their iTunes credentials to complete app installation. Note: If users have not logged into their iTunes accounts on the devices, the ManageEngine MDM app will be available in the App Catalog. Also, the ManageEngine MDM app can be used for securing E-mail attachments as explained here. You can also configure the mail template for distributing the app, if needed. The option ' Distribute ME MDM app to managed iOS devices' is enabled by default and ensures the ManageEngine MDM app is installed on all managed iOS devices. ManageEngine MDM app is required to detect jail-broken devices, distribute documents, remotely view device screens and track the location of managed devices. Distributing ManageEngine MDM app to managed iOS devices

Upon detecting a Jailbroken device, the enrollment fails or the device is removed from management if it was previously managed. MDM identifies Jailbroken devices during enrollment and during every scan. To prevent the misuse of critical information, corporate data must be removed from such devices. Jailbroken devices give users additional capabilities which render the devices unsafe for enterprise use. Customize ME MDM app iOS - Security Settings On Identifying Jailbroken devices

Integrity Plus for android instal