Lockdown & Kiosk: Android Device Admin Mode

A Lockdown & Kiosk: Android Device Admin mode configuration disables certain features of Android devices and creates a Allowlist of apps that will be available to users in Kiosk mode.

The Android Device Admin Mode Configuration is deprecated and not supported for devices on Android 8 and later versions. It is recommended to use Android Enterprise Lockdowns for Kiosk Lockdowns on Android 8 and later versions.

You can restrict the option to modify settings or apps when an Android device is in Kiosk mode.

Add apps and select settings in the Create Lockdown & Kiosk: Android Device Admin Mode Configuration page.
The option to change the settings using the Settings icon will be available in Kiosk mode.
Select apps without choosing any settings configuration options and the settings icon will not be displayed in Kiosk mode.
If you choose not to include any apps in the configuration, then the settings icon will be displayed.

Setting	What To Do
Name	Enter a name that identifies this configuration.
Description	Enter a description that clarifies the purpose of this configuration.
Lockdown Settings: Disable features for all Android devices.
Disable Wi-Fi	Select to turn off access to wireless LANs.
Disable Camera	Select to turn off camera access.
Disable Bluetooth	Select to turn off Bluetooth features. Use caution when using this option. Ivanti recommends against disabling audio because hands-free Bluetooth access is disabled. Legal requirements for hands-free use of devices while driving is becoming more widespread.
Kiosk Mode Settings: Enables the device to be used as a kiosk, with operation restricted to a few specific apps. Kiosk mode settings will not be applied to a device with Android 8.0 and above. For such devices, the Kiosk Status in device details page reports UNSUPORTED_ON_DEVICE as Kiosk Status.
Enable Kiosk Mode	Select to configure Kiosk Mode on Android devices.
Disable Quick Settings	Select to disable Quick Settings in Kiosk mode.
Allow User to Access Wi-Fi Settings	Select to allow a user to change Wi-Fi settings and access preferred wireless networks.
Allow User to Access Bluetooth Settings	Select to allow a user to change the Bluetooth settings and pair additional Bluetooth devices.
Allow User to Access Location Settings	Select to allow a user access to the location settings.
Allow User to Delay Application Updates	Select to allow a user to delay application updates.
Kiosk Exit PIN	Enter the four-digit code that the end user must type in order to exit Kiosk Mode.
Create a Allowlist of apps: These apps will be available to users in Kiosk Mode by adding apps to the allowed apps list. Drag and Drop to arrange the apps in the order they should appear in the Kiosk Mode launcher. Adding an application to the list of allowed apps will not install the app on device. Be sure to distribute each app to the appropriate users and user groups in the App Catalog.
Built-In Apps	Click +Add to include listed native apps in the group of apps allowed in Kiosk Mode. If you have disabled Dialer or Camera in Lockdown settings above, they cannot be added to the Allowed Apps list.
App Catalog	Click +Add to included listed apps from the app catalog in the group of apps allowed in Kiosk Mode.
Other Apps	Click +Add to include the package name of an app that is not available on the Google Play Store.
Kiosk Mode Allowed Apps	Click X to remove an app from the group of apps allowed in Kiosk Mode. Drag and drop to change the order in which apps appear on kiosk devices.

For Samsung devices with Knox Standard 4.0 or higher, the multi-user feature is automatically locked down in kiosk mode.

For non-Samsung devices, Kiosk mode is not supported on Android 8.0 or higher. Ivanti recommends using Android Enterprise lockdowns for Kiosk mode on Android 8.0 or later.