Overview: Manage devices with Google endpoint management

This feature is available with Cloud Identity Free and Cloud Identity Premium editions. Compare editions 

To maximize productivity, users want to access the Google Account and services they use for work from their mobile devices, laptops, and desktops from anywhere. At the same time, you want to protect your organization’s data. With Google endpoint management, you can make your organization's data more secure across your users' mobile devices, desktops, laptops, and other endpoints.

What's your device management goal?

	Basic mobile security Basic mobile management is on by default and provides core security like hijacking protection. Your users don't need to install a device management app with this option. Setup: Automatically applied, no user setup required Management options: Set password requirements for managed mobile devices Wipe a user's account from a mobile device Manage apps for Android devices Review included features Learn more about basic management
	Advanced mobile security and app management Use advanced mobile management if you need more control over your organization's data. You can require stronger passwords, wipe devices remotely, manage iOS apps, use Android work profiles, and more. Setup: Turn on for all or select mobile device platforms and organizational units, users must install a management app on their devices Management options: All basic mobile management options Require admin approval for mobile devices Wipe a mobile device Recommend and manage iOS apps Review included features Set up advanced management
	Computer security You can control which laptops, desktops, and other endpoints can access your organization's data and get details about those devices. You can block devices, sign out users remotely, and use Context Aware Access. Manage computers
	Company-owned device management You can manage all your company-owned devices—mobile devices, laptops, desktops—in one place in your Google Workspace Admin console. Learn how to source, enroll, and manage these company assets for all platforms and device types. Set up company-owned devices