Why you would use Rules?
An important use of Rules is to block the usage of unproductive apps - For example Netflix, Tiktok or Facebook when your users are expected to be using the device for productive work.
Setup your rules once and they will automatically apply to new devices enrolled based on the Device Groups they are in.
How to Create a new Rule
The FocusMDM Dashboard provides an easy step-by-step way to create (and edit) Rules. The 4 steps are:
- Enter a Name (mandatory) that explains what the rule does so its easy to recognize.
- And use the Description field (optional) to add notes about the rule so other administrators can understand what the rule is doing.
- Define the rule by selecting one of the options (as seen in image below)
- Select which devices/Device Groups or all devices are impacted by the rule
- Select which apps/App Groups are used for the Rule
The FocusMDM Rules
Block Apps
Block the usage of apps for 100% of the time (i.e. these apps can never be used on these devices)
- You can block usage of the app just when the user is on mobile data so they can use the app on Wi-Fi. Or you can block it completely
- The rule can be set for a group of apps or list the apps in the rule
- The rule can apply to all devices, a group of devices or individual devices
Block apps at a given time interval
- Block apps across a given time time interval (i.e. Block YouTube from 9am-5pm)
- You can block usage of the app just when the user is on mobile data so they can use the app on Wi-Fi. Or you can block it completely
- The rule can be set for a group of apps or list the apps in the rule
- The rule can apply to all devices, a group of devices or individual devices
Block apps after usage limit has been exceeded
- Block apps after a certain amount of data has been used (i.e. Block Facebook after 1GB of telecom data is used)
- You can block usage of the app just when the user is on mobile data so they can use the app on Wi-Fi. Or you can block it completely
- The rule can be set for a group of apps or list the apps in the rule
- The rule can apply to all devices, a group of devices or individual devices
Block apps by setting up password
- Once blocked an app can be unblocked by entering password so only the user who has the password can use the app
- NOTE: Entering password will not permanently unblock the app. Once closed it becomes blocked again.
- You can block usage of the app just when the user is on mobile data so they can use the app on Wi-Fi. Or you can block it completely
- The rule can be set for a group of apps or list the apps in the rule
- The rule can apply to all devices, a group of devices or individual devices
Allow adding/deleting accounts
- On the right side of the screen you'll see an option for Google accounts
- Stop users adding personal google mail to device
Disable VPN Service
- Once the rule has been applied, the device user will see that the VPN icon (key) will NOT show at the top of the phone.
- Also if the VPN is disabled, then App blocking after a set usage will NOT work as usage is not monitored accurately
Some Rules are only supported in DO Mode
For more on this see the section on DO mode
DO Mode ONLY Rules are:
Install/update work apps
- Push the installation of selected apps from the managed Google Play Store to the device
- In case that selected app is already installed on a device, it will be updated to latest version.
- NOTE: If in the Install list of Apps, then is automatically in the "Whitelist" and available on managed Google Play Store for the device
Useful notes on automatic App updating
By default, Managed Google Play apps will not update unless the following conditions are met:
- The device is connected to Wi-Fi
- The device is charging
- The device is not actively being used
- The app to be updated is not running on the foreground
For more information, see the Manage App Updates documentation from Google.
There is a device setting that defaults to "Update apps over Wi-Fi only"
Whitelist apps
Specifies which apps will be listed in managed Google Play Store app and therefore available to be installed.
- If there are no apps in your Whitelist, then ALL apps in the managed Play Store are available to be installed.
Disallow uninstall apps
Specifies if a user is disallowed from uninstalling applications.
Disallow factory reset
Specifies if a user is disallowed from factory resetting the device.
Password complexity (Not yet fully implemented)
- Enforces general lock password on device and specifies a password strength
Allow adding/deleting accounts
When applied, this rule option will allow user to manage (add/delete) accounts on android apps.
- This rule is needed if device users want to add a Google account for email and other Google apps
Add Comment