Managing Corporate Owned Devices

Updated on 25 Mar 2024
3 Minutes to read

Article summary

Did you find this summary helpful?

Thank you for your feedback

Corporate-owned devices are the ones that are owned by an organization but given to employees or set up for unattended access. Their primary use case is to get complete control of the applications that an employee has access to or to make sure that there is only one application running. Combined with the application control, you might want to control a bunch of other settings so as to increase productivity. Corporate-owned devices are widely divided into two categories as mentioned below,

Corporate Owned Single Use (COSU): COSU refers to business-owned Android devices which behave and deploys for a single dedicated purpose. You may enroll, deploy and manage such business-owned Android devices through the COSU profile using the Android for the Work platform.
Work Managed Device (WM): This solution set is designed for corporate-owned devices that are used exclusively for only work. This manages the entire device and enforces an extended range of policy controls unavailable to work profiles, restricting the device to only corporate use.

In this guide, we will see the various features that Scalefusion offers that will help to manage your Corporate devices. Click on the links in each section to navigate to the relevant help document.

Feature	Description
Android for Work Setup	This is the common step to effectively manage your Android 6.0 devices and above. This requires a Gmail account or Any Email account (non-Google Workspace account) for your organization and some easy steps on Scalefusion Dashboard. If you are using devices less than Android 6.0 or you are using devices that are not Android Enterprise ready, then you can skip this.
Choose between Kiosk or Agent Mode	Scalefusion offers two modes of operation to manage corporate-owned devices. One is an option to set Scalefusion as the default launcher, where you can customize the launcher experience. Another option is to set Scalefusion as an agent which retains the Android's default launcher but still lets you control the policies.
Device Profile for Corporate Devices	Device Profile is a Scalefusion Dashboard entity, that you can use to group all the policies together and apply it to one or multiple devices. Device Profile offers a wide range of policies, like application policy, browser shortcut settings, display & notification settings, single app mode, etc.
QR Code/Enrollment Configurations	QR Code or Enrollment configurations are Scalefusion Dashboard entity that helps you create reusable enrollment configurations. Once a configuration is created, you can use the QR Code to enroll your corporate devices, or use config files if you are looking at mass deployment.
Enrolling Corporate Owned Android Devices	Once you have the device profile and an enrollment configuration ready, use this guide to learn the various enrollment options available.
Application Management	One of the advantages of enrolling your devices via afw#mobilock, is the ability to search and distribute applications directly from Google Play Store. If your organization has private enterprise apk's, Scalefusion offers an enterprise store where you can upload your apk's and publish/install on Android devices.
Control Permissions for Applications	This guide explains on how you can control the application permissions at a global level and at an application level.
Application Configurations	You can remotely configure an application that is distributed from Scalefusion's Play for Work apps. This may include remotely configuring the Email, or setting up Chrome usage policies.
Device Password Policy	Secure your corporate devices, by enforcing a device-level password. This ensures that your corporate data is secure even if the device is left unattended or stolen.
Security Settings and Managing OS Updates	Use these options to apply additional security settings on selected OEM and EMM -managed devices. Additionally, learn how to set an OS Update policy which determines how the Android OS updates are handled. Note that this cannot control the OEM/Firmware updates.
Factory Reset Protection	Get extra security for your EMM-managed devices. Configure a set of G-Mail ID's that are required to provision the device once they are factory reset. This helps you to prevent the misuse of a device by factory resetting it.
Configure Exchange ActiveSync	If your organization uses Exchange-based email server, then you can use Scalefusion to configure the devices with your Exchange settings.

Was this article helpful?

What's Next

Scalefusion Client Mode for Corporate Owned Devices