Clear search
Close search
Google apps
Main menu

Assist users of managed Android devices

This feature isn't available in the legacy free edition of Google Apps.

G Suite administrators can manage users' Android devices on which the Google Apps Device Policy app is installed. (If you're not an administrator, see Google Apps Device Policy for Android: Overview for Users.)

As an administrator, you can:

  • Enforce security policies: Use the Device management page in your Admin console to require a password on users' devices and set password requirements. Learn more about Mobile Management
  • Remotely wipe devices: If a user's device is lost or stolen, you can remotely erase data on the device and reset it. Learn more

Open all   |   Close all

What your users can do with the Google Apps Device Policy app

Users can use the Google Apps Device Policy app on their mobile Android devices to:

  • View security policies that you set on their phone.
  • Manage their devices: Users can access the My Devices page to reset their device's PIN, and ring, lock, and locate their device. Additionally, enabling Allow user to remote wipe device in your Admin console gives users the ability to remotely wipe their own devices from their My Devices page. Learn more.
  • Multiple account support: If a user's device is set up to use Google Apps Device Policy app with multiple G Suite accounts with different policies, the most restrictive policy will be enforced on the device. For example, if one domain requires the device PIN to be 4 characters long and another requires it to be 6 characters long, the device will enforce the 6 character limit.
  • Create Android for Work Profile: If your organization is enrolled in the Android for Work program, users can create a Work Profile on their Android 5.0+ device that supports Android for Work. Users can easily install business apps that have been recommended or created by your organization from Google Play for Work. Android for Work lets users effortlessly switch between work and personal apps. Business apps appear with personal apps in the launcher and recent apps list, but business app icons have badges that clearly distinguish them.
Requirements for Google Apps Device Policy app
  • Android 2.2 and higher
  • G Suite, Education, or Government
Deploy the Google Apps Device Policy for your organization
  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in

  2. From the Admin console dashboard, go to Device management.

    To see Device management, you might have to click More controls at the bottom.

  3. (Optional) Create Organizational units for your users so you can enforce specific device policies.
  4. Click Device management > Setup > Mobile management.
  5. Before setting up mobile management, email your Android users instructing them to download the Google Apps Device Policy app from Google Play.
  6. Set up mobile management.
  7. Have your users install the Google Apps Device Policy app before you enable device policies in your Google Admin console. (In most cases, the app downloads during enrollment.)
  8. (optional) If you've enabled device activation, see the Activation article for steps you need to take to approve your users' devices.

Google Apps Device Policy app is now being enforced on your users devices. You can block devices or change your policies at any time.

Frequently Asked Questions for Google Apps Device Policy for Android

How do my users uninstall the Google Apps Device Policy app?

See Uninstall Google Apps Device Policy app.

How do I remotely wipe a device?

See Remote Wipe a Mobile Device.

How do I find out what version of Android my user has on their phone?

On their device, go to Settings > About phone > Software information. Android version should be 2.2 or higher to work with the Google Apps Device Policy app.

How do I find out if a user has a Work Profile set up on their device?

On their device, go to Settings > Accounts. Managed accounts are listed under Work.

How do my users upgrade to the latest version of Android?

Upgrades are usually dependent on the carrier. Contact your user's carrier for more information on their software update cycle.

I don't see Google Play on the device. How do I get it?

Android Market was rebranded as Google Play on March 6, 2012. Older devices may still refer to the app as "Android Market" or "Market".

I only want Google Apps Device Policy for a certain group in my domain. Can I enforce Google Apps Device Policy on an individual or group-level basis?

Yes. You can create organizational units and enforce specific device policies for members of each organizational unit. For more information, see Org Settings.

In what countries is the Google Apps Device Policy app available?

The Google Apps Device Policy app should be available in all countries where G Suite is available. Please contact G Suite support if you're unable to set up the Google Apps Device Policy app for your organization.

Error messages with Google Apps Device Policy app

"Authentication failed. Please enter the password correctly and try again" appears after my users have installed the Google Apps Device Policy app and are trying to set it up with their G Suite account.

Have them repeat step 2 in Set up the Google Apps Device Policy app on your phone or tablet a couple times, selecting their G Suite account. They may need to re-enter your password if you see this error message.

If they keep getting the error, and they've enabled 2-step verification for their account, they'll need to enter an application-specific password instead of their G Suite password in the device.

"Sign-in error for [user's email address]" appears in my user's Android status bar at the top of the screen when setting up the Google Apps Device Policy app.

When your user presses this error message on their device, they're taken to a screen that says "You entered the wrong password or your account has changed. Please re-enter your password." Have your user re-enter their password.

If your user has 2-step verification enabled, he will need to enter an application-specific password instead of his password the first time he signs in to his Android.

Error message: "Your domain requires mobile device management. Please install the Google Apps Device Policy application to enforce security policies required by the (your email address) account."

Your user's getting this error because you've enabled device activation and your user hasn't yet installed Google Apps Device Policy on their Android. Have your user press the download button on their Android to download the Google Apps Device Policy app.

Was this article helpful?
How can we improve it?
Sign in to your account

Get account-specific help by signing in with your G Suite account email address, or learn how to get started with G Suite.