Tag Archives: Android enterprise

Delivering security and privacy for Exchange on Android

For many Android users, Microsoft Exchange is the backend for their company email. Until recently, many email applications on Android used Device Admin capabilities to enforce the necessary security requirements on users’ devices, whether they were issued by their company or personally owned.

These APIs, which we began deprecating in Android 9 Pie, gave IT control over core security features such as device passcode requirements and remote data wipe. While this gives IT admins controls to promote data protection on the devices when using Exchange email clients, it also adds unnecessary complexity.

We've worked closely with Microsoft to create a new set of APIs that give email developers tools to secure their apps while adhering to the high standards we've set in Android for user privacy.

Google and Microsoft work together for user privacy

We teamed up with Microsoft to build a new way to offer the security that IT needs when using Microsoft Exchange, while offering the privacy employees have come to expect on personal Android devices.

IT admins have the option to require a user to follow a specified level of password complexity (options are for high, medium or low) to use their Exchange email app. If they don’t follow the set guidelines, they won’t be able to sync and access their corporate email. If IT needs to restrict or remove access on the device, no personal information, such as photos or downloads, will be removed. 

Combined with other Android technologies like the SafetyNet Attestation API, Android hardware-backed brute force protections and Google Play Protect, IT professionals can feel confident their data is protected by enterprise-grade security while giving their employees greater autonomy over their device. 

Bringing these improvements to more users

To make sure as many users as possible can benefit from this change, the Android team has developed a backwards-compatible implementation of this approach in Google Mobile Services. Email app developers can migrate away from Device Admin on any version of Android they support.

Gmail will showcase this new functionality later this month. As Android app developers update apps to meet the official Device Admin deprecation requirements in Android 10 later this year, look for your favorite email client to take advantage of this functionality soon.

For companies whose needs evolve and would benefit from even greater management capabilities, we invite them to learn more at android.com/enterprise.

Connect with mobility experts in our help community

Our customers continue to inspire us with how they are successfully mobilizing their workforce with Android. To help our customers and partners connect and learn from one another, we’ve launched the Android Enterprise Help Community. It’s an open forum for discussing platform features, planning, deployment and sharing ideas about mobility topics.

After testing this concept with a select group it’s now open for all customers and partners who wish to join the conversation.

How to get involved

The Help Community integrates with our Android Enterprise Help Center, giving a centralized hub for finding answers to platform-related questions. During the forum’s beta period, our early testers had helpful conversations about device management modes, zero-touch enrollment and other features.

The forum is ready for mobile IT experts who want to offer guidance for those seeking answers to mobility questions. Also, admins who are on a quest for new information about a mobility challenge can start a conversation thread around a new topic or read the many contributions from others.

Becoming a Google Product Expert

Want to showcase your Android Enterprise knowledge in the community? We would love for you to participate by joining our Google Product Experts program to earn points and status while you contribute. 

When you become an expert, you'll get exclusive program perks, like special badges in the Google Help Communities, direct access to Google employees to provide product feedback and a chance to test Google products before they're released.

Join the conversation

To get started, head to the Android Enterprise Help Community to explore the available topics, post a reply, or start a new conversation.

We aim for this community to be useful for everyone, from highly engaged experts to those who are seeking an answer for a specific situation.  Be sure to check back regularly for further content and user engagement opportunities in our Help Center and Help Community.

Work profile: the new standard for employee privacy

Employees increasingly demand privacy from the technology they use every day, but employers often see privacy in opposition to enterprise data security. 


Since its debut in Android 5, the work profile has secured company data on personally-owned devices while preserving employee privacy. The separation of work and personal apps means IT gets full control over work apps and data, but has no visibility into personal apps. In Android 11, we’re bringing these privacy protections to company-owned devices as well, while providing IT the additional capabilities needed to manage company assets. 


Employees demand privacy, even on company-owned devices

In a recent survey by ESG research, 71 percent of employees said they expect all personal information to remain private on work devices. This resistance to traditional full device management creates challenges for IT organizations. In fact, employee concern about privacy is the top reason mobile devices remain unmanaged by IT, according to IDC: 

“Many users of corporate-liable devices have privacy concerns about app usage and corporate IT monitoring their activity,” says Phil Hochmuth, program VP, enterprise mobility at IDC. “Due to this concern, more than a third (38 percent) of corporate-owned devices deployed in enterprises go unmanaged.”


Personal data should always stay private

Android is committed to delivering simple, consistent privacy protections to our users. Just as IT shouldn’t put company data at risk to enable mobile productivity, employees shouldn’t be asked to reveal private, personal data to their company. 


That’s why we’ve expanded Android’s commitment to employee privacy in Android 11, by bringing the privacy protections of the work profile to company-owned devices. This means IT can deploy the work profile to help protect employee privacy across their entire fleet, regardless if the device is personally or company-owned.


Always get the right level of management

To make the work profile a great tool for company asset management, we had to bring to it many of the capabilities our customers value in Android’s fully managed devices. These include: 

  • Asset management protections, even if devices are lost or stolen

  • Personal usage policies such as restricting what apps employees can use, to keep device usage in compliance with corporate policy

  • Hardware management, to restrict or prevent configuration of features like Bluetooth, cameras, and removable storage


Extending management beyond the work profile required us to separate the management of data from visibility into that data. For example, IT can block an employee from using social media apps on a company-owned device, but in doing so doesn’t need to know the other apps they use outside of work. Now Android can help preserve employee privacy in the personal profile while enabling IT management of what employees can do with the personal profile.

Work profile chart

Whoever owns the device gets to decide how the device can be used. As before, if an employee owns their device IT can only manage core security features, like preventing users from installing apps from unknown sources. But if the company owns the device, IT can now manage how users interact with the whole device. In this way, the work profile adjusts its management capabilities according to who owns the device, while offering the same privacy protections in all scenarios.


Get it first with the Android Management API

We’re pleased to announce that the Android Management API will support these work profile enhancements in July enabling customers and developers to try out these new features on the Android 11 Beta.


Exclusive to the Android Management API, we’re bringing Android 11’s new combination of strong personal privacy protections and robust asset management features to older Android devices, as far back as Android 8. This means customers can deploy a single management solution across most, if not all of their Android fleet, not only for personally- and company-owned devices but across a wide range of Android versions as well. Speak with your enterprise mobility management (EMM) provider to learn how your company can make the most of the work profile.


Prioritizing privacy

Since the beginning, we designed Android Enterprise with employee privacy at the forefront. We are looking forward to expanding that mandate into the world of company-owned devices in a way that ensures both security and privacy for employers and employees. To learn more about the privacy enhancements in the work profile and other enterprise features coming in Android 11, please visit the Android developer site.

How Android Enterprise supports healthcare mobility needs

We’ve been deeply inspired  by the work of medical professionals and first responders throughout the COVID-19 crisis and we’re encouraged, humbled and thankful for their efforts. We also appreciate the healthcare IT community, who are playing a vital role in deploying and managing mobile devices to address hospitals’ critical response needs. 

Many of these IT admins around the world have reached out to us for guidance with deploying and using devices in these settings. To provide a one-stop resource for healthcare organizations looking to stand up and scale mobility initiatives with Android devices, we’ve launched a new community for IT admins and partners who are supporting their organizations with Android.

Supporting healthcare IT admins

The Healthcare IT Response Community has been organized to address specific use cases that have been especially challenging during this time.  It features best practices from Google on how to help securely deploy devices and offers a forum for the healthcare IT community to connect with each other and learn from their experiences with deploying devices for appropriate, non-medical uses. This effort is also providing a way for IT admins to learn from our mobility partners, many of whom have generously volunteered to offer guidance on device selection, managing a device fleet, and supporting deployments. They also participate in the discussion boards, sharing ideas and answering technical questions.    

We are very grateful to our global partners, such as Samsung, MobileIron, BT and more who have already made a difference in helping hospitals and other healthcare organizations get devices configured for appropriate, non-medical uses and into the hands of those who need them.

We've been able to offer help to King’s Health Partners and King’s College London with Life Lines, a project that has rapidly deployed thousands of secure, managed tablets to hundreds of ICUs in the UK. Similarly, at hospitals in the US, we’re helping to deploy a number of managed Pixel phones and Pixel Slates configured with Google Meet to facilitate communication between patients and their families. We are looking forward to further collaboration with our partners to innovate and serve the healthcare community in these challenging times.

How to get involved

We welcome the participation of healthcare organizations who may need guidance in quickly setting up a deployment, as well as mobility partners who want to lend their support. Here’s how to get started:

  • If you are looking for support for your organization’s deployment, or inquiring on behalf of a customer, fill out the Healthcare IT Response Community nomination form. Once approved, we’ll send you information on accessing the community.

  • If you are a partner who would like to offer help, please register for access on our community portal. 

We look forward to further supporting the healthcare community’s mobility needs, so please do reach out to us if there are additional ways we can help. To learn more about how to deploy Android devices for your organization, visit android.com/enterprise.

How Android Enterprise supports healthcare mobility needs

We’ve been deeply inspired  by the work of medical professionals and first responders throughout the COVID-19 crisis and we’re encouraged, humbled and thankful for their efforts. We also appreciate the healthcare IT community, who are playing a vital role in deploying and managing mobile devices to address hospitals’ critical response needs. 

Many of these IT admins around the world have reached out to us for guidance with deploying and using devices in these settings. To provide a one-stop resource for healthcare organizations looking to stand up and scale mobility initiatives with Android devices, we’ve launched a new community for IT admins and partners who are supporting their organizations with Android.

Supporting healthcare IT admins

The Healthcare IT Response Community has been organized to address specific use cases that have been especially challenging during this time.  It features best practices from Google on how to help securely deploy devices and offers a forum for the healthcare IT community to connect with each other and learn from their experiences with deploying devices for appropriate, non-medical uses. This effort is also providing a way for IT admins to learn from our mobility partners, many of whom have generously volunteered to offer guidance on device selection, managing a device fleet, and supporting deployments. They also participate in the discussion boards, sharing ideas and answering technical questions.    

We are very grateful to our global partners, such as Samsung, MobileIron, BT and more who have already made a difference in helping hospitals and other healthcare organizations get devices configured for appropriate, non-medical uses and into the hands of those who need them.

We've been able to offer help to King’s Health Partners and King’s College London with Life Lines, a project that has rapidly deployed thousands of secure, managed tablets to hundreds of ICUs in the UK. Similarly, at hospitals in the US, we’re helping to deploy a number of managed Pixel phones and Pixel Slates configured with Google Meet to facilitate communication between patients and their families. We are looking forward to further collaboration with our partners to innovate and serve the healthcare community in these challenging times.

How to get involved

We welcome the participation of healthcare organizations who may need guidance in quickly setting up a deployment, as well as mobility partners who want to lend their support. Here’s how to get started:

  • If you are looking for support for your organization’s deployment, or inquiring on behalf of a customer, fill out the Healthcare IT Response Community nomination form. Once approved, we’ll send you information on accessing the community.

  • If you are a partner who would like to offer help, please register for access on our community portal. 

We look forward to further supporting the healthcare community’s mobility needs, so please do reach out to us if there are additional ways we can help. To learn more about how to deploy Android devices for your organization, visit android.com/enterprise.

What you need to know about Device Admin deprecation

Android 10 delivered many helpful features for enterprise admins and users. It also marked the official deprecation of Device Admin-based management, a legacy form of Android management. 


Since our original announcement about this change in 2017 we’ve been encouraging customers to adopt Android Enterprise, which offers a modern management framework for the evolving needs of enterprise customers.


While Android 10 marks the official deprecation of Device Admin, some customers may still be on the legacy management framework because either their devices are not yet upgraded to Android 10 or their Enterprise Mobility Management (EMM) Device Policy Controller is not updated to API level 29. 


However, when Android 11 launches later this year, it is expected EMMs will need to update their DPCs to API level 29 by the fourth quarter of 2020. When this occurs, admins will no longer be able to manage lock screen settings, passwords or disable the camera.


We’ve created a new video that outlines many of the key changes that IT admins can expect and strategies to prepare for a transition to Android Enterprise.

To assist customers with this migration, we’ve created the Android Enterprise Migration Bluebook, which provides detailed steps and best practices for moving from a legacy Device Admin deployment to Android Enterprise. We also encourage reaching out to your organization’s EMM provider for assistance with planning.


For further assistance with your mobility efforts, check out our Android OnAir webinar series where you can hear our experts discuss mobility topics and strategies for using Android to transform your business.

Improve Android deployments with new employee adoption kit

Bringing Android Enterprise to your organization opens up new possibilities for your business, and a well-structured communication plan can help employees understand all the capabilities.


We’ve created the Android Enterprise Employee Adoption Kit to help IT teams communicate the features and benefits to their employees.


Resources include helpful videos, flyers, email templates, and slide decks that walk through how to get started with Android device features and management tools. We’ve designed these assets to be useful for preparing your users, assisting them in getting started, and sharing out tips, especially for those switching to Android.


Getting teams ready for Android Enterprise

To generate buzz before introducing Android Enterprise to your organization, you can use and customize our email scripts to share details about the new mobile experience for your team. Some companies may wish to create a demo desk to give new users a guided tour of Android Enterprise features. We’ve included suggested scripts to help walk employees through what’s to come.


Our user adoption slides detail the benefits, features, and scope of different device management modes. New YouTube videos offer a helpful overview of using the work profile, managed Google Play, and zero-touch enrollment. These videos can be embedded into internal sites or shared out directly.


Also, customizable slide decks walk through initial steps with a new Android device, provide detailed instructions for key tasks like downloading an app, or highlight the many benefits to using the work profile.


Learning Android features

Giving your team regular tips and tricks helps them take advantage of Android features and gain confidence in their device. We’ve prepared assets that offer suggestions for using helpful productivity tools in Android and embracing the privacy and work-life balance the work profile offers.


This kit is available for all those who wish to help their teams find success with Android. Learn more about Android Enterprise and how it can transform your business.

Learn from our mobility experts at Android OnAir

To support Android Enterprise customers with their mobility initiatives, we’ve created a series of webinars at Android OnAir that offer best practices in deploying and managing devices. Each webinar tackles an essential subject that is top of mind for IT decision makers and admins. Participants can join a live Q&A during the broadcast to get answers directly from Google. If you can’t make the live broadcast, webinars are all available on-demand.

Our current catalogue of on-demand webinars cover important topics like deployment strategies and Android security updates. Check out the upcoming schedule and register today to reserve your spot.

Google security services on Android 

April 15:Android devices are backed by industry-leading security to help keep devices safe. Learn how Google Play Protect, Safe Browsing, SafetyNet and other Google Security Services help safeguard company data and employee privacy, and discover strategies to incorporate them into your mobility initiative.

Using mobile to improve business continuity 

May 13: Android can transform how your teams connect with each other and work more efficiently, no matter where they are. Learn how you can take mobile devices beyond traditional use cases and give employees more convenience with access to internal services like private apps, corporate sites and key services to extend business continuity to any device.

How Google mandates Android security standards

June 17:Consistent security and management standards give companies the confidence to use a mix of devices from different OEMs to support various business use cases. Find out more about how Google works closely with device manufacturers and developers to implement security systems that are deployed on enterprise devices.

Preventing enterprise data loss on Android

July 15: Data loss can be catastrophic for any business. Learn how Android Enterprise management features give IT admins the tools to mandate secure app and data usage practices that help prevent leaks and guard against attacks from bad actors. Discover Android management strategies to give employees the level of access you want while helping protect critical company data.

Equip your frontline workers for success with Android

August 12: Frontline workers like sales associates, warehouse managers, delivery drivers and others perform critical tasks that drive customer success. However, mobile investment in these employees remains low. Businesses can use mobile devices to empower these teams with data-driven decisions and real-time access to company resources. Learn how business can use Android device diversity to provide the right device for each digital use case.

Explaining Android Enterprise
Recommended and security requirements

September 16: Android Enterprise Recommended simplifies mobility choices for businesses with a Google-approved shortlist of devices, services, and partners that meet our strict enterprise requirements. Find out how this initiative can help your team select devices with consistent security and software requirements and find validated Enterprise Mobility Management and Managed Service Provider partners.


Get into “Focus mode” at work with help from Android

Holding your focus and attention at work can sometimes be a challenge, but Android offers helpful tools so that you can reduce distractions and get work done on your own terms. Whether it’s news alerts, social media, or other apps you find distracting, Focus mode lets you pause apps that could keep you from tackling those important tasks. The work profile also clearly labels work apps in a separate tab, so you can quickly access the important ones you need to get your job done.

Get in the zone with Focus mode

Use Focus mode to pause apps in your personal profile that you find distracting.

focus mode schedule.gif

Pause selected apps with Focus mode.

Once you turn on Focus mode, the apps you chose will be grayed out on your screen and their notifications will be hidden. Also, any notifications from those apps are put on hold until Focus mode is turned off.

Focus-Mode-activation.gif

With one tap, turn on Focus mode and quiet any potential distractions.

To suit your work hours, you can create a daily schedule with Focus mode so it launches automatically during the time period you specify. If you’re on a lunch break or need to check any of the paused apps, you can take a break from Focus mode to use those apps for a short period.  When the break’s over, Focus mode resumes automatically so those apps won’t bother you.

take a break.png

Take a break for a while, then Focus mode will turn back on.

Work profile organizes the apps you need

On personally enabled devices, the work profile helps you quickly get to the apps you need. When it’s time to step away from work, you can pause the work profile—work apps will be unavailable and won’t send you any notifications until they’re back on.

work profile android.png

Pause work profile to snooze notifications and apps.

Focus mode and work profile are among the many ways that Android works the way you want. Learn more about what Android can do for you at work.

How Android helps you work smarter

Technology should be there to assist you at work by solving problems in new ways. Android is built to be helpful with smart features that speed up everyday tasks and make work more accessible. From better communication tools to time-saving tricks, here are some of the ways that Android can help you be more productive. 

Faster dialing with Click to Call

Need to make a call while working from your laptop? Instead of awkwardly glancing back and forth between your computer and phone to punch in the number, which can easily lead to a misdial, Click to Call does all the work at once.

With Click to Call, you can send a phone number from the Chrome browser on your computer to your Android phone. Just right-click on the number, select your Android device from the menu, and this will send a push notification to your phone. Then tap the notification and the  dial button to start the call. Make sure you’re signed in to sync on both devices.

call from pixel 3.png

Make phone calls quickly with Click to Call.

Save time with Smart Reply

In Android 10, Smart Reply gives recommended actions based on the content of a message you receive. For example, if a colleague sends you the address of a client meeting, Android will pull up directions in Google Maps. Or if you receive a Hangouts Chat message with a link to a Google Doc, you can open it directly and start editing. Smart Reply works in messaging apps like Hangouts Chat, Messages, and many third-party apps such as Signal.

smart reply.gif

Smart Reply sends you directly to just the right app.

Enhance communication with speech to text apps

Live Transcribe and Live Caption help you capture and follow conversations, presentations, or meetings. As part of Android’s accessibility suite of tools, Live Transcribe captions speech in real time on screen and, if you choose to, saves the transcriptions on your device for up to three days. The app can help the deaf people and people with hearing loss more easily participate in conversations. Additionally, for business meetings it can provide clarity in communicating when one or more of the participants are not native speakers to the language used in the conversation.

live transcribe.png

Spoken words appear on your device with Live Transcribe.

Live Transcribe is available in the Play Store for all devices Android 5.0 and up. On Pixel 3 and Pixel 4 devices, the service can be enabled from the accessibility settings.

Live Caption, introduced in Android 10, automatically captions any media playing in real time on your device, even if you’re offline. It’s helpful for situations where you need to catch a company presentation or webinar, but it’s not convenient to play the audio because you don’t have headphones on you. Live Caption gives deaf people and people with hearing loss another accessibility tool for following along with a video conference or company presentation.

Live Caption is available on Pixel 3, Pixel 3a, and Pixel 4 devices running Android 10, and is coming to the Galaxy S20.

These are among the many ways Android is here to help and strives to provide new solutions for everything you need to get done throughout the day. Learn more about how Android is ready for work and transforming how businesses get things done.