Jump to content


Photo

'Droid: Imaging\Enterprise Managment


  • Please log in to reply
8 replies to this topic

#1 Master_Scythe

Master_Scythe

    Titan

  • Hero
  • 20,553 posts
  • Location:QLD

Posted 28 May 2018 - 12:05 PM

So, a lil help if you'd be so kind my friends!

My place of employment is looking to distribute Android Tablets to Rural Queensland.

 

So first, is there an imaging or ninite style installer for Android tabs?

That first one is a simple question, there must be some way to mass deploy tablets.

 

We're looking for a security solution that will let us:

Lock down the tablets. (no settings menu, except certain things, like wifi)

Manage them from a web portal. (wipe, reset passwords, etc)

and NOT lock us out of the device, if the user tries to set passwords and such. (google accounts are not the best, they're TOO secure, we want a self managed web portal if possible, or just a more friendly Cloud Management portal)

 

Ideally, we'd like to be able to 'push' apps to the devices, disable the play store (at least, from a user level), and such like that.

I think a few antivirus vendors may offer this?

 

I'm just finding it really hard to search for this information and a lot more of it is from 2012~2015, so there could easily be a lot more out there I don't know about.

Can you guys suggest any sort of remote management on Android?

 

The upper management doesn't want to go the iPad route, because in Rural locations, while all of them are steal-able, there's a prestige to i-devices, that make them much more theft friendly.....

 

Thanks guys!


Wherever you go in life, watch out for Scythe, the tackling IT support guy.

"I don't care what race you are, not one f*cking bit, if you want to be seen as a good people, you go in there and you f*ck up the people who (unofficially) represent you in a negative light!"


#2 Rybags

Rybags

    Immortal

  • Super Hero
  • 35,760 posts

Posted 28 May 2018 - 01:04 PM

I don't think Android is real good in that regard.  Sure, with the popular and high end devices you get the hacker community making all sorts of customizations and flashable images but such things aren't officially supported and can break at moment's notice.

You can hide apps but I think they need to be disabled first.  But even with apps hidden there's workarounds - check out a really cool app called "Activity Launcher", I use it to access control settings that aren't within the normal menu structure.

I guess if you disable Play Store and stuff like dev mode and installing untrusted apps, that takes it some of the way to Kiosk Mode.

Pushing apps to the devices - I guess there should be some automation sw around that can do that.  Of course you'd need to be able to cope with things like running low on storage.

 

The phone makers (or some) seem to have a system that updates their bloatware seperately from the normal ecosystem so it has to be possible.  But of course they're the ones who've customized the OS for their devices.

Another avenue to explore might be 3rd party launchers like Nova but the weakness of launchers is that they're really just a skin and usually easy to get around and in some cases occasionally crashes and dumps you back in the default UI.



#3 Master_Scythe

Master_Scythe

    Titan

  • Hero
  • 20,553 posts
  • Location:QLD

Posted 28 May 2018 - 01:08 PM

I can do all the security with parental mode if need be, I'd just then need to know how to image it, and have a cenral mangment engine.

 

There HAS to be one.


Wherever you go in life, watch out for Scythe, the tackling IT support guy.

"I don't care what race you are, not one f*cking bit, if you want to be seen as a good people, you go in there and you f*ck up the people who (unofficially) represent you in a negative light!"


#4 Jeruselem

Jeruselem

    Guru

  • Atomican
  • 14,913 posts
  • Location:Not Trump-Land

Posted 28 May 2018 - 02:04 PM

Have looked at G-Suite?

 

https://support.goog...r/1734200?hl=en

 

You can use Google Mobile Management to manage, secure, and monitor mobile devices in your organization. You can manage a range of devices, including phones, tablets, and smartwatches. People in your organization can use their personal devices for work (BYOD), or you can give them company-owned devices to use.

There are 2 levels of mobile management—basic and advanced. Each level of management gives you a different set of features. Some advanced features, such as mobile auditing and rules aren’t available in all editions

 

(It's not free but anyway)


Edited by Jeruselem, 28 May 2018 - 02:06 PM.

“We’re not going to stop the wheel. I’m going to break the wheel.” - Daenerys Targaryen

 

"We have some of the most beautiful hookers in the world" - Putin to Trump


#5 Master_Scythe

Master_Scythe

    Titan

  • Hero
  • 20,553 posts
  • Location:QLD

Posted 28 May 2018 - 03:02 PM

Have looked at G-Suite?

 

https://support.goog...r/1734200?hl=en

 

You can use Google Mobile Management to manage, secure, and monitor mobile devices in your organization. You can manage a range of devices, including phones, tablets, and smartwatches. People in your organization can use their personal devices for work (BYOD), or you can give them company-owned devices to use.

There are 2 levels of mobile management—basic and advanced. Each level of management gives you a different set of features. Some advanced features, such as mobile auditing and rules aren’t available in all editions

 

(It's not free but anyway)

 

So long as there's a free trial so I can value prove it to the organisation, that'll be fine.

 

Will that same tool allow me to apply 'profiles'\configs to new devices?


Wherever you go in life, watch out for Scythe, the tackling IT support guy.

"I don't care what race you are, not one f*cking bit, if you want to be seen as a good people, you go in there and you f*ck up the people who (unofficially) represent you in a negative light!"


#6 Jeruselem

Jeruselem

    Guru

  • Atomican
  • 14,913 posts
  • Location:Not Trump-Land

Posted 28 May 2018 - 04:39 PM

 

Have looked at G-Suite?

 

https://support.goog...r/1734200?hl=en

 

You can use Google Mobile Management to manage, secure, and monitor mobile devices in your organization. You can manage a range of devices, including phones, tablets, and smartwatches. People in your organization can use their personal devices for work (BYOD), or you can give them company-owned devices to use.

There are 2 levels of mobile management—basic and advanced. Each level of management gives you a different set of features. Some advanced features, such as mobile auditing and rules aren’t available in all editions

 

(It's not free but anyway)

 

So long as there's a free trial so I can value prove it to the organisation, that'll be fine.

 

Will that same tool allow me to apply 'profiles'\configs to new devices?

 

 

I don't know, but there's a free trial so you can find out I guess.


“We’re not going to stop the wheel. I’m going to break the wheel.” - Daenerys Targaryen

 

"We have some of the most beautiful hookers in the world" - Putin to Trump


#7 krovikan8472

krovikan8472

    Serf

  • Lurker
  • 9 posts

Posted 05 June 2018 - 08:38 AM

I don't know if this helps, but my personal phone can be wiped by my works tech department through email. They use a Microsoft exchange which in order for me to use it, I must give them access. They can in theory change my passwords/security settings, turn the device off, see failed authentication attempts etc.



#8 Master_Scythe

Master_Scythe

    Titan

  • Hero
  • 20,553 posts
  • Location:QLD

Posted 05 June 2018 - 10:25 AM

I don't know if this helps, but my personal phone can be wiped by my works tech department through email. They use a Microsoft exchange which in order for me to use it, I must give them access. They can in theory change my passwords/security settings, turn the device off, see failed authentication attempts etc.

 

Thanks for that :)

That is actually a point, and one I'll keep in mind.

 

Catch would be that a factory reset would get past that; however it might be suitable for 'in OS' management... hmm


Wherever you go in life, watch out for Scythe, the tackling IT support guy.

"I don't care what race you are, not one f*cking bit, if you want to be seen as a good people, you go in there and you f*ck up the people who (unofficially) represent you in a negative light!"


#9 Jeruselem

Jeruselem

    Guru

  • Atomican
  • 14,913 posts
  • Location:Not Trump-Land

Posted 05 June 2018 - 01:09 PM

I imagine there's the usual trojan horse inserted by the tech department on the phone for that to happen.


“We’re not going to stop the wheel. I’m going to break the wheel.” - Daenerys Targaryen

 

"We have some of the most beautiful hookers in the world" - Putin to Trump





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users