Data ingress/egress

App installs

Availability

Added in

TDM v1

Available in

Standard, Professional

Specifies if a user can install apps, uninstall apps, disable apps, clear app caches, force stop apps and clear app defaults.

Options:

  • Allow (default)

  • Disallow

Equivalent Android Settings:

  • UserManager.DISALLOW_INSTALL_APPS

  • UserManager.DISALLOW_UNINSTALL_APPS

  • UserManager.DISALLOW_APPS_CONTROL

Presets:

Preset

Value

Reference

DISA STIG

Disallow

GOOG-12-006600; GOOG-12-006700

NCSC

Disallow

Available Apps

Xewli

Disallow

Bluetooth

Availability

Added in

TDM v1

Available in

Standard, Professional

Supported in

Android 8+

Specifies if the device can use bluetooth. Only available on devices that have bluetooth.

Options:

  • Allow (default)

  • Disallow

Equivalent Android Settings:

  • UserManager.DISALLOW_BLUETOOTH

Presets:

Preset

Value

Reference

DISA STIG

Allow

(not specified - use system default)

NCSC

Allow

(not specified - use system default)

Xewli

Allow

Bluetooth sharing

Availability

Added in

TDM v1

Available in

Standard, Professional

Supported in

Android 8+

Specifies if files can be transferred using bluetooth. Only available on devices that have bluetooth.

Options:

  • Allow (default)

  • Disallow

Equivalent Android Settings:

  • UserManager.DISALLOW_BLUETOOTH_SHARING

Presets:

Preset

Value

Reference

DISA STIG

Allow

(not specified - use system default)

NCSC

Allow

(not specified - use system default)

Xewli

Allow

Camera

Availability

Added in

TDM v1

Available in

Standard, Professional

Specifies if the device camera functionality can be used. If disallowed, no applications will be able to access any cameras on the device. Only available on devices that have at least one camera.

Options:

  • Allow (default)

  • Disallow

Equivalent Android Settings:

  • DevicePolicyManager.setCameraDisabled

Presets:

Preset

Value

Reference

DISA STIG

Allow

(not specified - use system default)

NCSC

Allow

(not specified - use system default)

Xewli

Allow

Debugging

Availability

Added in

TDM v1

Available in

Standard, Professional

Specifies if debugging features (e.g. ADB) can be accessed. Only available on devices that have either Wi-Fi or USB accessory support.

Warning

This is extremely powerful functionality, and almost always should be disallowed in production/operational devices.

Options:

  • Allow (default)

  • Disallow

Equivalent Android Settings:

  • UserManager.DISALLOW_DEBUGGING_FEATURES

Presets:

Preset

Value

Reference

DISA STIG

Disallow

GOOG-11-002800

NCSC

Disallow

Developer Options

Xewli

Disallow

Mount physical media

Availability

Added in

TDM v1

Available in

Standard, Professional

Specifies if a user can connect external physical media devices (e.g. USB sticks).

Options:

  • Allow (default)

  • Disallow

Equivalent Android Settings:

  • UserManager.DISALLOW_MOUNT_PHYSICAL_MEDIA

Presets:

Preset

Value

Reference

DISA STIG

Disallow

GOOG-12-008400

NCSC

Allow

Physical media

Xewli

Disallow

Outgoing NFC

Availability

Added in

TDM v1

Available in

Standard, Professional

Specifies if the device can use NFC Beam. Only available on devices that support Android Beam.

Options:

  • Allow (default)

  • Disallow

Equivalent Android Settings:

  • UserManager.DISALLOW_OUTGOING_BEAM

Presets:

Preset

Value

Reference

DISA STIG

Allow

(not specified - use system default)

NCSC

Allow

(not specified - use system default)

Xewli

Allow

Location sharing

Availability

Added in

TDM v1

Available in

Standard, Professional

Specifies if a user can turn on location sharing (i.e. can broadcast the devices current location to apps and third parties). Only available on devices that have location detecting capability (e.g. GPS).

Options:

  • Allow (default)

  • Disallow

Equivalent Android Settings:

  • UserManager.DISALLOW_SHARE_LOCATION

Presets:

Preset

Value

Reference

DISA STIG

Disallow

GOOG-12-009500

NCSC

Disallow

Location Sharing

Xewli

Allow

Screen capture

Availability

Added in

TDM v1

Available in

Standard, Professional

Specifies if a user can take screenshots.

Options:

  • Allow (default)

  • Disallow

Equivalent Android Settings:

  • DevicePolicyManager.setScreenCaptureDisabled

Presets:

Preset

Value

Reference

DISA STIG

Allow

(not specified - use system default)

NCSC

Disallow

Screen capture

Xewli

Allow

Unknown app sources

Availability

Added in

TDM v1

Available in

Standard, Professional

Specifies if users can install applications from locations other than trusted app stores and ADB.

Options:

  • Allow (default)

  • Disallow

Equivalent Android Settings:

  • UserManager.DISALLOW_INSTALL_UNKNOWN_SOURCES_GLOBALLY

  • UserManager.DISALLOW_INSTALL_UNKNOWN_SOURCES

Presets:

Preset

Value

Reference

DISA STIG

Disallow

GOOG-12-006500

NCSC

Disallow

Unknown Sources

Xewli

Disallow

USB file transfer

Availability

Added in

TDM v1

Available in

Standard, Professional

Specifies if a user can transfer files over USB. Only available on devices that have USB.

Options:

  • Allow (default)

  • Disallow

Equivalent Android Settings:

  • UserManager.DISALLOW_USB_FILE_TRANSFER

Presets:

Preset

Value

Reference

DISA STIG

Disallow

GOOG-12-008500

NCSC

Disallow

USB file transfer

Xewli

Disallow