Managing Android Enterprise: work profile, full management and policy files
You manage an Android fleet with policy files: work profile and fully managed modes, passcode and update policies, managed app configuration, kiosk mode and compliance, writing the policies as JSON and verifying them on the simulated device.
Level 301 · 22 lessons · 18 practice labs
Lessons
Management modes
- Management modes: work profile, fully managed, dedicated device
- Device owner and profile owner
- Inside the work profile: a separate user, separate data
- Provisioning flows: QR, zero-touch, enrolment token
- Short task: find the simulated device's management mode and owner in dumpsys output
Writing the policy file
- The structure of the policy JSON
- Password requirements: scope and quality levels
- The system update policy and freeze periods
- Install and debugging restrictions
- Network, always-on VPN and certificate policies
- Short task: write a valid policy JSON from given requirements and have it validated
Apps and data
- The managed store and app policies
- Managed configurations: pushing settings to an app remotely
- Cross-profile data rules: copy, share, contacts
- Permission policies: auto-grant and deny
- Short task: find and close the setting that lets work data be copied to the personal side
Special use and auditing
- Kiosk mode and dedicated devices
- What happens on non-compliance: warn, block, wipe
- Security logs and network activity logs
- Policy troubleshooting: the setting that did not apply
- Short task: write a kiosk policy for a warehouse handheld that allows only two apps
Capstone
- Capstone: write and verify two policies for a courier company's field phones and BYOD staff
Practice labs
- Find the simulated device's management mode: Read the device or profile owner from dumpsys device_policy output.
- List the work profile user and its apps: Find the profile user and extract the packages installed only in that profile.
- Classify three device dumps by mode: Tell apart work profile, fully managed and dedicated devices with evidence lines.
- Read the password requirement in a policy JSON: Find the quality level and scope.
- Write a valid policy JSON from requirements: Write a policy with passcode, encryption and debugging restriction and have the simulated API validate it.
- Define an update window and a freeze period: Write a policy for Turnalı Perakende's tills with a night update window and a peak-season freeze period.
- Read the app list and install types in a policy: Separate the required and blocked apps.
- Give an app its server address by managed configuration: Write the configuration to match the schema and have it validated.
- Set the permission policy per app: Leave the default at prompt, auto-grant location to the field app, deny camera elsewhere and verify the result.
- Find the cross-profile copy setting: Read the value of the clipboard and sharing settings in the policy.
- Stop work data being copied to the personal side: Correct the setting and confirm on the simulated device that it applied.
- Tune contact and calendar sharing to the requirement: Show contacts for caller ID, close other data flows, write the policy and deliver it with its reasoning.
- Read the allowed apps in a kiosk policy: Find which apps can open in locked mode.
- Write a kiosk policy that allows two apps: Write the policy for a Mavikaya Lojistik warehouse handheld, turning off the status bar and settings.
- Close the escape routes in a kiosk policy: Find and close the safe mode, USB file transfer and factory reset openings in the policy.
- Read the policy version applied to a device: Find the applied policy name and version for the device in the simulated API.
- Find why a setting did not apply: Extract from the non-compliance detail why the setting is unsupported and propose a fix.
- Write and verify two policies for field phones and BYOD: Write fully managed and work profile policies for Kuzeyyıldızı Kargo, add non-compliance actions and have them validated.
About this course
You manage an Android fleet with policy files: work profile and fully managed modes, passcode and update policies, managed app configuration, kiosk mode and compliance, writing the policies as JSON and verifying them on the simulated device.
What you will learn
- Management modes
- Writing the policy file
- Apps and data
- Special use and auditing
- Capstone
Prerequisites
You should be comfortable with the level 101 and 201 topics of the same path.
Lab environment
Lessons run in your own Kali Linux terminal that opens in the browser. Nothing to install; the lab starts clean in every lesson.
Frequently asked questions
- Is this course right for my level?
- The course is at level 301; it assumes you know the topics of the lower-level courses.
- Is there anything to install?
- No. Every lesson runs in your own lab environment that opens in the browser.
- How do lessons work?
- Each lesson has 8 to 10 steps and a short quiz. Early steps show the command to type, later steps give less help; if two attempts fail, the solution opens.
- Can I try it for free?
- Yes. The first three lessons of every course are free.