1. What is the difference between App Store Apps and Enterprise/In-house Apps?
App store apps are the applications exclusively available in the App Store for installation. They can either be free or paid apps. Enterprise/In-house apps, on the other hand, are custom-built applications that are designed and developed for enterprise-specific requirements and are solely owned and distributed by the enterprise.
2. How to disable App Store on the managed devices without affecting the installation of apps distributed via MDM?
App Store can be disabled on managed devices by navigating to Policies > New Policy > iOS > Advanced Restrictions and under Allow App Settings, uncheck Install app from App Store. This action would disable the App Store on the device and hide the App Store icon from the home screen. The required apps can still be installed on the device by distributing them via the MDM console.
3. What is Volume Purchase Program (VPP)?
Apple Volume Purchase Program (VPP) allows the businesses and educational institutions to purchase applications and books in bulk and distribute the same to users via managed distribution or redemption code. Volume Purchase Program available with Apple Business Manager (ABM) and Apple School Manager (ASM) helps in managing free and paid Store apps. With ABM, the admin can manage the app licenses by assigning or revoking the apps distributed to a device and reusing the license to distribute it to some other device.
4. What is an .apk file?
‘APK’ stands for Android Application Package and is a file format that Android operating system uses to distribute and install mobile applications. It contains every element an app needs to install correctly on the device. The Android program files are compiled and then packaged into a container that forms the .apk file. APK files are used to install apps from outside the Google Play Store (make sure they are installed from trusted sources).
5. What is the behavior of app permissions when a device is put in kiosk mode?
When a device is put in kiosk mode, no permission prompts will be generated unless explicitly enabled on the device from the MDM console. To enable the settings, go to Policies > New Policy > Kiosk Lockdown and choose the desired functionalities listed under Peripheral Settings such as disable status bar, keep screen on, disable power button, disable volume button, etc.
6. Does MDM allow iOS enterprise apps to be installed silently, without user intervention?
Only Supervised iOS devices support silent app installation of enterprise iOS apps. Add the enterprise app to the Hexnode app repository and push the same to the device to install it without user intervention.
7. Can you completely lock down an iOS device using an MDM?
Yes, activating single app kiosk mode on the device allows the admin to completely lock down the devices, enabling only the required apps, websites and settings and blocking all others.
8. Does MDM allow enterprise Android apps to be installed silently, without user intervention?
Hexnode allows enterprise apps to be installed silently on Android devices, specifically on Samsung Knox, LG GATE, Kyocera, rooted Android devices and devices running Hexnode as system app. For Android Enterprise enabled devices, silent app installation is possible for enterprise apps published as private in the Google Play Console.