Manage Android devices

This feature is not available in the legacy free edition of Google Apps.

Google Apps administrators can manage users' Android devices on which the Google Apps Device Policy app is installed. (If you're not an administrator, see Device Policy for Android: Overview for Users.)

As an administrator, you can:

  • Enforce security policies: Use the "Mobile settings" page in your Admin console to require a password on users' devices and set password requirements. Learn more about Google Apps Mobile Management

  • Remotely wipe devices: If a user's device is lost or stolen, you can remotely erase data on the device and reset it. Learn more
What your users can do with Google Apps Device Policy

Users can use the Google Apps Device Policy app on their mobile Android devices to:

  • View security policies that you set on their phone.

  • Manage their devices: Users can access the "My Devices" page to reset their device's PIN, and ring, lock, and locate their device. Additionally, enabling Allow user to remote wipe device in your Admin console gives users the ability to remotely wipe their own devices from their My Devices page. Learn more.

  • Multiple account support: If a user's device is set up to use Device Policy with multiple Google Apps accounts with different policies, the most restrictive policy will be enforced on the device. For example, if one domain requires the device PIN to be 4 characters long and another requires it to be 6 characters long, the device will enforce the 6 character limit.
  • Create Android for Work Profile: If your organization is enrolled in the Android for Work program, users can create a Work Profile on their Android 5.0+ device that supports Android for Work. Users can easily install business apps that have been recommended or created by your organization from Google Play for Work. Android for Work lets users effortlessly switch between work and personal apps. Business apps appear with personal apps in the launcher and recent apps list, but business app icons have badges that clearly distinguish them.
Requirements for Google Apps Device Policy
  • Android 2.2 and higher
  • Google Apps for Work, Education, or Government

See special installation steps for Android 2.2 users.

Deploy Google Apps Device Policy for your organization
  1. Sign in to the Google Admin console.
  2. Go to your Mobile settings page.

  3. (optional) Create Organizational units to put your users in to enforce specific device policies.

  4. Before checking Enforce policies on Android devices or Enable device activation, email your Android users instructing them to download the Google Apps Device Policy app from Google Play.

  5. Have your users install the Device Policy app before you enable Device Policy in your Google Admin console. Otherwise, these Android 2.2 users will need to follow the special download instructions.

    If you have many Android 2.2 users, we recommend you plan a deployment day on which you install the Device Policy app on their phones. Learn more about installing the Device Policy app for Users.

  6. (optional) If you've enabled device activation, see the Activation article for steps you need to take to approve your users' devices.

Device Policy is now being enforced on your users devices. You can block devices or change your policies at any time.

Frequently Asked Questions for Device Policy for Android

How do my users uninstall Device Policy?

See Uninstall Google Apps Device Policy.

How do I remotely wipe a device?

See Remote Wipe a Mobile Device.

How do I find out what version of Android my user has on their phone?

On their device, go to Settings > About phone > Software information. Android version should be 2.2 or higher to work with Device Policy.

How do I find out if a user has a Work Profile set up on their device?

On their device, go to Settings > Accounts. Managed accounts are listed under Work.

How do my users upgrade to the latest version of Android?

Upgrades are usually dependent on the carrier. Contact your user's carrier for more information on their software update cycle.

I don't see Google Play on the device. How do I get it?

Android Market was rebranded as Google Play on March 6, 2012. Older devices may still refer to the app as "Android Market" or "Market".

I only want Device Policy for a certain group in my domain. Can I enforce Device Policy on an individual or group-level basis?

Yes. You can create organizational units and enforce specific device policies for members of each organizational unit. For more information, see Org Settings.

In what countries is Google Apps Device Policy available?

Google Apps Device Policy should be available in all countries where Google Apps is available. Please contact Google Apps support if you're unable to set up Google Apps Device Policy for your organization.

Error messages with Device Policy

"Authentication failed. Please enter the password correctly and try again" appears after my users have installed Device Policy and are trying to set it up with their Google Apps account.

Have them repeat step 2 in Set up Device Policy on your phone or tablet a couple times, selecting their Google Apps account. They may need to re-enter your password if you see this error message.

If they keep getting the error, and they've enabled 2-step verification for their account, they'll need to enter an application-specific password instead of their Google Apps password in the device.

"Sign-in error for [user's email address]" appears in my user's Android status bar at the top of the screen when setting up Device Policy.

When your user presses this error message on their device, they're taken to a screen that says "You entered the wrong password or your account has changed. Please re-enter your password." Have your user re-enter their password.

If your user has 2-step verification enabled, he will need to enter an application-specific password instead of his password the first time he signs in to his Android.

Error message: "Your domain requires mobile device management. Please install the Google Apps Device Policy application to enforce security policies required by the (your email address) account."

Your user's getting this error because you've enabled device activation and your user hasn't yet installed Google Apps Device Policy on their Android. Have your user press the download button on their Android to download the Device Policy app.