[android] Securing Android Devices - How do you do it?

[CyBeRkId2002]

Hi all,

 

As title really... looking for a quick and simple way to set some basic policies on a very small number of Android devices (phones) we are distributing to the central team.

 

I am predominantly thinking of:

 

• Require complex password (biometrics fine)
  
• Enforce encryption
  
• 
  

 

And thats about it! We use Exchange Online for our email solution but I am having very mixed results applying the Mobile Deployment options to android devices (can't seem to get them to require an alpha-numeric password and for some reason a passcode is still allowed (albeit an 8 digit one). For info my settings on Exchange Online are:

 

• Require Password: On
  
• Allow simple passwords: Off
  
• Require alphanumeric: On
  
• Must include this many character sets: 2
  
• Minimum password length: 7
  
• 
  

 

Any help if schools have managed to achieve this, either via Exchange Online or other software would be greatly appreciated!

[MatthewL]

We lock ours down using a MDM, cannot install apps off the playstore, our MDM has its own "playstore" we publish apps to and they can install from there. Disable the location service been turned off so can still be tracked if lost, if there are only specific apps they need chuck them in kiosk mode with just them apps published.

 

Disable USB connectivity to stop data been transferred on/off, can also set it to once they sign into the MDM app which is linked to AD is setup the Outlook profile with the credentials just need to pop in password (its not setup syncd yet). Just off the top of my head they are the key bits.

[CyBeRkId2002]

Looking at doing this with Meraki now... Can't seem to be able to force a passcode (just says that Meraki recommends one). Surely this must be one of the most basic settings in ensuring compliance. Anyone else achieved this with Meraki?