Android Device Policy enforces your organization’s security policies on your device to protect corporate data and make it more secure.
Requirements
- Android 6.0 Marshmallow or later device. Devices without work profile support are not supported.
- A device on which you're signed in to a Google Workspace account.
When the Android Device Policy is installed on your device, it can access your device's:
- Location—used to check for available WiFi networks, to align with security policies and offer a new network when needed.
- Phone—used for device registration and to report device IDs to your administrator.
- Camera (optional)—used to scan QR codes if your administrator enrolls the device for management.
What your administrator can do with Android Device Policy
Your administrator can:
- Set these security policies:
- Device password strength and required length
- Invalid passwords allowed before the device is wiped
- Recently expired passwords that are blocked
- Days before a device password expires
- Idle minutes before a device automatically locks
- Days device has not synced before wiping
- Application auditing
- Device encryption
- Remotely wipe a company-owned device
- Blocking of security-compromised devices
- Configure Wi-Fi networks and manage network access certificates. They might choose to hide a network's details so that only users who have the network name and password can connect to it.
- Block access to Google apps from your work account based on your device’s country or region, network, security settings, or operating system.
Where to find the device policy app
If needed, you can access the app in your device settings at Settings Google
Work
Device Policy.
Troubleshooting
My device is company-owned or set up for work only
- Restart the device and see if the sync starts.
- If restarting doesn’t work, go to Settings
Google
to manually sync data.
- If those steps don’t work, reset the device to factory settings. A factory reset erases all data from the device, so make sure to back up essential data first. For details, see Reset your Android device to factory settings.
My device is for work and personal use
Re-register your device by removing your work profile and then adding back your Google Workspace account and work profile.
- Open your device settings.
- Tap Accounts
- Tap Delete to confirm.
- Go to I’m using my own personal device and follow the steps to add your Google Workspace account and work profile.
My device is for work and personal use and it has a work profile
- Remove the work profile.
- Open the Settings app and tap Accounts.
- Add the work account again and set up Android Device Policy.
(A work profile is required for Android Device Policy.)
My device is for work and personal use and doesn’t have a work profile
- Open the Google Apps Device Policy app.
- Tap Unregister.
The work account is removed from the device.
- Open the Settings app and tap Accounts.
- Add the work account again and set up Android Device Policy.
During enrollment, you must set up a work profile because it's required for Android Device Policy.
My device is company-owned or set up for work only
An administrator must reset the device or, if allowed, you can reset it yourself. Then, you add your work account again and set up Android Device Policy.