XenMobile Server

App lock device policy

The App lock device policy defines a list of apps that are allowed to run on a device, or a list of apps that are blocked from running on a device. You can configure this policy for both iOS and Android devices, but the exact way the policy works differs for each platform. For example, you can’t block multiple apps on an iOS device.

Likewise, for iOS devices, you can select only one iOS app per policy. This means that users are only able to use their device to run a single app. They can’t do any other activities on the device except for the options you specifically allow when the app lock policy is enforced.

Also, iOS devices must be supervised to push App Lock policies.

Although the device policy works on most Android L and M devices, app lock does not function on Android N or later devices because Google deprecated the required API.

To add or configure this policy, go to Configure > Device Policies. For more information, see Device policies.

iOS settings

Image of Device Policies configuration screen

  • App bundle ID: Click the app in the drop-down list to which this policy applies or click Add new to add an app to the list. If you select Add new, type the app name in the field that appears.
  • Options: Each of the following options applies only to iOS 7.0 or later. For each option, the default is Off except for the Disable touch screen, which defaults to On.
    • Disable touch screen
    • Disable device rotation sensing
    • Disable volume buttons
    • Disable ringer switch

      When the Disable ringer switch is On, the ringer behavior depends on what position the switch was in when it was first disabled.

    • Disable sleep/wake button
    • Disable auto lock
    • Disable VoiceOver
    • Enable zoom
    • Enable invert colors
    • Enable AssistiveTouch
    • Enable speak selection
    • Enable mono audio
  • User Enabled Options: Each of the following options applies only to iOS 7.0 or later. For each option, the default is Off.
    • Allow VoiceOver adjustment
    • Allow zoom adjustment
    • Allow invert colors adjustment
    • Allow AssitiveTouch adjustment
  • Policy settings
    • Remove policy: Choose a method for scheduling policy removal. Available options are Select date and Duration until removal (in hours)
      • Select date: Click the calendar to select the specific date for removal.
      • Duration until removal (in hours): Type a number, in hours, until policy removal occurs. Only available for iOS 6.0 and later.

Android settings

Note:

You can’t block the Android Settings app by using the App Lock device policy.

Image of Device Policies configuration screen

  • App Lock parameters
    • Lock message: Type a message that users see when they try to open a locked app.
    • Unlock password: Type the password to unlock the app.
    • Prevent uninstall: Select whether users are allowed to uninstall apps. The default is Off.
    • Lock screen: Select the image that appears on the device’s lock screen by clicking Browse and navigating to the file’s location.
    • Enforce: Click either Blacklist to create a list of apps that aren’t allowed to run on devices or click Whitelist to create a list of apps that are allowed to run on devices.

      Note:

      The XenMobile Server console includes the terms “blacklist” and “whitelist”. We’re changing those terms in an upcoming version to “block list” and “allow list”.

  • Apps: Click Add and then do the following:
    • App name: Click the name of the app in the drop-down list to add to the allow or block lists, or click Add new to add an app to the list of available apps.
    • If you select Add new, type the app name in the field that appears.
    • Click Save or Cancel.
    • Repeat these steps each app that you want to add to the allow or block lists.
App lock device policy