Restrict Android and Windows apps in HexnodeSolved

Hello @ethan_ ,

You can manage this using Hexnode UEM app management policies.

For restricting apps, use Blocklist or Allowlist policies:

Android:

1. Go to Policies tab and create a new policy or open an existing policy.
2. Navigate to Android > App Management > Blocklist/Allowlist.
3. Choose the required mode:
   • Blocklist: Blocks selected apps.
   • Allowlist: Allows only selected apps and blocks the rest.
4. Add the required apps or app groups and save the policy.
5. Associate the policy with the required devices or device groups. If the Android device needs to run only one app or a fixed set of work apps, use Android Kiosk Lockdown instead of a standard allowlist.

Windows:

1. Go to Policies tab and create a new policy or open an existing policy.
2. Navigate to Windows > App Management > Blocklist/Allowlist.
3. Choose either:
   • Blocklist: Prevents selected apps from running.
   • Allowlist: Allows only approved apps to run.
4. Add apps using one of the available options:
   • Add Apps for Store apps.
   • Add Rules for executable or packaged apps using file path or publisher-based rules.
5. Save and associate the policy with the target devices.

Regards,
Simon Scott
Hexnode UEM

Ok got it. What about pushing apps quickly to multiple Android or Windows devices? Do I need to install them one by one?

No, you do not need to install apps individually. For bulk deployment, add the app to the Hexnode app inventory and then deploy it using Required Apps policy.

1. Go to Apps > +Add Apps.
2. Select the app type, such as Store App, Enterprise App, or Web App.
3. Search for the app or upload the required app file, then add it to the inventory.
4. Go to Policies tab and create a new policy or edit an existing policy.
5. Navigate to Android or Windows > App Management > Required Apps.
6. Click Configure, add the app from the inventory, and save the policy.
7. Add the required devices or device groups under Policy Targets and save the policy.

Once the policy is associated, Hexnode UEM deploys the selected apps to the targeted devices.

For removing apps, is deleting the app from the policy enough, or should I use a remote action?

The quickest removal method is the direct remote action:

1. Go to Manage > Devices.
2. Select the Android or Windows device, or select multiple target devices.
3. Click Actions > Apllications > Uninstall application.
4. Choose the app from the list and click Done.

If the app was deployed through a Required Apps policy, also edit that policy and remove the app from the policy. This prevents the app from being pushed again by the same policy.

Hexnode also supports Remove apps from the device on policy removal option for apps deployed through Required Apps policy. When this option is enabled in the policy, the app is automatically uninstalled when the policy is removed from the device or when the device is removed from the policy’s target group.