Search
Clear search
Close search
Google apps
Main menu

Google Apps is now G Suite. Same service, new name. More about the name change.

Set up mobile devices for management

As a G Suite administrator, you can set up fully integrated mobile device management with continuous monitoring. Just choose some settings and install some management apps.

Open all   |   Close all

Choose a level of management
  • Manage mobile devices

    This is the recommended option. When you manage mobile devices, you offer device users secure access to corporate apps and data. Manage your active devices in the Admin console or on your own mobile device. Audit and manage device usage and events. To use this level of management with Android mobile devices, you enroll in the Android for Work subscription serviceduring management setup. To use it with iOS mobile devices, you set up an Apple Push Certificate during management setup.

  • Manage mobile devices with a device approval phase

    With this option, you can prevent managed devices from accessing corporate data until you approve them for activation. Without this option, the system automatically activates mobile devices on setup completion. To use this option, you choose one extra setting during management setup.

  • Synchronize data without mobile management

    With this option, you can offer mobile device users the ability to synchronize their devices with the corporate account. This keeps corporate data up-to-date on their devices. Although this option is available without mobile management, choosing mobile management adds protections that keep your corporate data safe. For this option, you choose only one setting and you don't need to set up management.

Set up Android mobile devices

Start setup in the Admin console

Before starting this setup procedure, choose a level of management

After completing this procedure, finish the setup process on each mobile device. All settings are supported on all device versions, except where specified.

To set up Android mobile devices for management:​

  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. From the Admin console dashboard, go to Device management.

    To see Device management, you might have to click More controls at the bottom.

  3. Click Setup > Setup.
  4. In the Setup section, apply these settings, clicking Save after making changes. Standard settings are applied by default.
    • Allow Android Sync

      Check this box to allow users to automatically synchronize their Android devices with the corporate account. If you check only this box, you offer users the ability to sync their devices, without mobile management. For mobile management, also apply the setting that follows.

    • Manage Android devices

      Check this box to allow Android devices to be registered for management. Registration gives users access to corporate data. Management gives you, the domain administrator, control of the corporate apps and data on their devices. Checking this box also makes additional Android settings available. You can choose to apply these additional settings as you need them. Supported for Android 2.2+ Froyo.

  5. In the Device activation section, consider this setting, clicking Save if you apply it:
    • Require admin approval for device activation

      Check this box to add an optional approval phase to the device activation process. When you apply this setting, the system lists devices ready for your approval on a device activation page. You can approve each device individually. If you don't apply this setting, the system activates the device directly after the device user completes the setup steps.

      After you apply this setting, enter your corporate email address. This email address receives notifications when users first synchronize their devices with the corporate server. When you're ready to approve devices, learn more about Device approvals.

  6. (Optional) Click Company Owned devices and consider this setting, clicking Save if you apply it:
    • Enable Device Owner option during initial device setup

      Check this box if your company owns its devices, and the devices are running Android 6.0 Marshmallow and above. This setting enforces management of company-owned devices. Management gives you full administrative control and permission to apply additional settings that regulate apps installation, personal accounts, and hardware. You can control settings for microphones, speakers, and memory card access. You can also control network settings and security options. You can perform factory resets on devices. When you're ready, you can find these management control settings under Android settings.

  7. Click Android for Work.

    Android for Work separates business apps from personal apps so you can use your favorite Android device for both work and play. If your domain doesn't have an Android for Work subscription, you can set it up. For additional information about setting up and using Android for Work, visit the Android for Work Help Center

  8. Apply additional management settings. Some of these settings apply, by default, when you check the box to manage devices. You can change them now, or at any time. You can also choose these additional settings:
    • Apply Password settings to require passwords on mobile devices and keep data safe.
    • Apply Android settings to manage users and accounts, work profiles (if used), shared apps and data, network access, and individual device features.
    • Apply Advanced settings to control encryption, security, Google Sync, Google Play, Google Now, and Google Glass.

Finish setup on the Android mobile device

You can do this yourself, or you can ask your device users to complete this task.

To finish setup:

  1. On the device, add a Google Account.

    Enter your username and the corporate domain's email address for the account you're adding—not your personal Gmail address. Be careful to add an account instead of creating a new one.

  2. Respond to these prompts, as needed:
    • Activate the G Suite Device Policy (this prompt doesn't appear if only the sync option was chosen).
    • If the requirement for a work profile was added, accept its setup when prompted.
    • Accept registration with the server.
    • Accept enforcement of the displayed domain policy settings. At this step, the device displays a list of the Admin-applied settings and asks permission to enforce them. This can require careful planning. For example, if you unchecked the box that allows lock screen widgets, the device user sees text here that says lock screen widgets are disabled. For each setting you apply, consider the result for the mobile device. 
    • If you chose to add an approval phase when you set up mobile management, the device user sees a message that the device is pending activation approval.

After setup steps on the device are completed, you can optionally approve the device (if you added an approval phase), and begin to manage active devices.

Set up Apple iOS mobile devices

Start setup in the Admin console

Before starting this setup procedure, choose a level of management

After completing this procedure, finish the setup process on each mobile device. All settings are supported on all device versions, except where specified.

To set up Apple iOS devices for management:

  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. From the Admin console dashboard, go to Device management.

    To see Device management, you might have to click More controls at the bottom.

  3. Click Setup > Setup.
  4. In the Setup section, apply these settings, clicking Save after making changes: 
    • Allow iOS Sync for G Suite

      Check this box to allow users to synchronize their iOS devices with the corporate account.  If you check only this box, you offer users the ability to sync their devices, without mobile management. For mobile management, also apply the setting that follows.

    • Manage iOS devices

      Check this box to allow iOS devices to be registered for management. Registration gives users access to corporate data. Management gives you, the domain administrator, control of the corporate apps and data on their devices. Checking this box also makes additional iOS settings available. You can choose to apply these additional settings as you need them. Supported for iOS 7.0+.

  5. In the Device activation section, consider this setting, clicking Save if you apply it:
    • Require admin approval for device activation

      Check this box to add an optional approval phase to the device activation process. When you apply this setting, the system lists devices ready for your approval on a device activation page. You can approve each device individually. If you don't apply this setting, the system activates the device directly after the device user completes the setup steps.

      After you apply this setting, enter your corporate email address. This email address receives notifications when users first synchronize their devices with the corporate server. When you're ready to approve devices, learn more about Device approvals.

  6. Click Apple Push Certificate.

    An Apple Push Certificate provides a trusted connection between your Admin console policies and your organization's managed mobile devices. Set it up once. Renew it yearly.

    Learn more about how to set up and renew Apple Push certificates. Here's a summary of each available option:

    • Renew Certificate

      Click this link to renew a certificate you have set up previously. The system shows the renewal deadline here. Renew the existing Apple Push Certificate annually, being careful not to create a new certificate instead. When you renew a certificate, use the same Apple ID that was originally used to set it up. (If you create a new certificate instead of renewing it, your iOS device users are required to repeat their portion of the setup process on their devices. Users cannot sync their G Suite data until re-registration is completed.)

    • Apple account ID

      Use this entry field as a handy place to store your Apple ID for future use.

    • Set up Apple Push Certificate

      Click this link to set up an Apple Push Certificate for the first time.

    • Set up Apple Push Certificate again

      Click this link to repeat the setup process for a certificate that has not yet expired. 

  7. Apply additional management settings. Some of these settings apply, by default, when you check the box to manage iOS devices. You can change them now, or at any time. You can also choose these additional settings:

Finish setup on the iOS mobile device

You can do this yourself, or you can ask your device users to complete this task.

To finish setup:

  1. On the device, add a Google Account.

    Enter your username and the domain's email address for the account you're account you're adding—not your personal Gmail address.

  2. Respond to these prompts, as needed: 
    • Accept the G Suite Device Policy Profile installation (this prompt doesn't appear if only the sync option was chosen).
    • Enroll the phone in remote management.
    • If you chose to add an approval phase when you set up management, the device user sees a message that the device is pending approval for activation.

After setup steps on the device are completed, you can optionally approve the device (if you added an approval phase), and begin to manage active devices.

Set up Windows Phone and other mobile devices

Start setup in the Admin console

Before starting this setup procedure, choose a level of management

After completing this procedure, finish the setup process on each mobile device. All settings are supported on all device versions, except where specified.

To set up Microsoft® Windows Phone® and other mobile devices for management:

  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. From the Admin console dashboard, go to Device management.

    To see Device management, you might have to click More controls at the bottom.

  3. Click Setup > Setup. 
  4. In the Setup section, apply these settings, clicking Save after making changes:
    • Allow Google Sync

      Check this box to enable user devices to synchronize their corporate email, calendar, and contacts via ActiveSync. If you check only this box, you offer users the ability to sync their devices, without mobile management. For mobile management, also apply the setting that follows. Learn more about Google Sync

    • Manage Google Sync devices

      Check this box to allow mobile devices to be registered for management. Registration gives users access to corporate data. Management gives you, the domain administrator, control of the corporate apps and data on their devices. 

  5. In the Device activation section, consider this setting, clicking Save if you apply it:
    • Require admin approval for device activation

      Check this box to add an optional approval phase to the device activation process. When you apply this setting, the system lists devices ready for your approval on a device activation page. You can approve each device individually. If you don't apply this setting, the system activates the device directly after the device user completes the setup steps.

      After you apply this setting, enter your corporate email address. This email address receives notifications when users first synchronize their devices with the corporate server. When you're ready to approve devices, learn more about Device approvals.

  6. Apply additional management settings. Some of these settings apply, by default, when you check the box to manage devices. You can change them now, or at any time. You can also choose additional settings:

Finish setup on the mobile device

You can do this yourself, or you can ask your device users to complete this task.

On the mobile device, add an account for your organization and respond to the prompts to complete the setup process.

After setup steps on the device are completed, you can optionally approve the device (if you added this phase), and begin to manage active devices.

Is setup complete on your mobile devices?

If you added a device approval phase, continue with Device approvals.

If you didn't add a device approval phase, you can continue with App management.

Was this article helpful?
Sign in to your account

Get account-specific help by signing in with your Apps for Work account email address, or learn how to get started with Apps for Work.