Can users be restricted from adding personal Gmail accounts on iOS BYOD devices?Solved

Hey @stevenhere,
MDMs cannot restrict users from signing in with personal Gmail accounts on BYOD iOS devices. This isn’t specific to Hexnode, it’s just how Apple handles work and personal data separation in BYOD setups. However, if you want to control how data flows between work and personal apps, you can use the Business Container policy in Hexnode. It helps separate corporate data from personal apps securely. Let me know if you’d like more details on that.

Hello @stevenhere ,

Thank you for reaching out. Sure, @stevenhere ! Here’s a quick breakdown:

For iOS: To have full control over device configurations, including restricting users from adding personal email accounts, you’ll need to use Automated Device Enrollment, Apple Configurator Enrollment, or ADE Enrollment using Apple Configurator. These methods give you more management capabilities compared to BYOD. You can check out the help doc on how to enroll iOS devices for more details.

For Android: When devices are enrolled under Android Enterprise as a Profile Owner or Work profile on company owned devices, a separate Work Profile is created. You can apply restrictions to manage or prevent users from adding or modifying accounts within the work profile. To gain full control over the entire device, you can use enrollment methods like the Android Enterprise Device Owner, Samsung Knox, or Android Zero-touch, amongst others. Check out our help documentation on how to enroll Android devices for more information.

Please feel free to reach out if you have any further questions.

Cheers,

Hexnode UEM

John Cooper

Thanks a lot, @john_cooper! That really helps. We’re still exploring Hexnode and getting familiar with all the features, but the support team and community have been great at guiding us through it. Appreciate you breaking this down!