Integrating ZENworks with Android Enterprise

With this program, ZENworks lets you enroll your devices in two ways:

By integrating Android in the enterprise with ZENworks, you can achieve the following benefits:

Before enrolling Android devices to ZENworks, you need to perform the following mandatory tasks:

Prior to commencing on the pre-enrollment tasks, you need to ensure that the basic configuration tasks to get started with the Mobile Management feature of ZENworks Configuration Management are in place. These include:

For more information on these tasks, see the Getting Started section in ZENworks Mobile Management Reference.

Before enrolling devices with Android in the enterprise, you first need to enroll your organization in the program. By enrolling in the program, Android recognizes ZENworks as the EMM vendor for your organization and thereafter any operation that has to be invoked on behalf of your organization, will be performed by ZENworks.

To enroll the organization, you need to create an Android Enterprise Subscription by navigating to the Subscribe and Share section in ZCC. While creating a subscription, you need to specify the Novell Customer Center credentials that have been provided to you, after which you will be re-directed to the sign-up UI hosted by Google. By registering your organization in this sign-up UI page, you access and distribute apps through managed Google Play. You need to register your organization using your corporate Google account credentials. After registering, you will be redirected back to ZCC, where you can proceed with the remaining UI screens to complete the following:

Besides creating a Mobile Device Enrollment policy, you also need to create and assign an Android Enterprise Enrollment Policy. A Mobile Device Enrollment policy is required for the basic enrollment of any mobile device to ZENworks, whereas the Android Enterprise Enrollment policy is required for Android devices to be enrolled in the work profile or work-managed device mode. While assigning the Android Enterprise Enrollment policy, you need to ensure that it is assigned to the same set of users who are part of the user context associated with the Android Enterprise Subscription. After configuring these tasks, you can then have your users enroll their devices in one of the two modes detailed in the previous section.

The ZENworks server communicates with an Android device using the ZENworks Agent app. Therefore, to enroll Android devices in either the work profile or the work-managed device mode, you need to have the ZENworks Agent app installed on the device.

After users enroll their devices in either of two modes, you can perform the following tasks that are relevant to both the enrollment modes:

ZENworks distributes apps to users through managed Google Play, which is Android’s app management platform for enterprise users. Subsequently, all app licenses are managed using managed Google Play.

You can secure work profile and work-managed devices by configuring password restrictions, device inactivity restrictions and by applying other additional restrictions. To do this, you need to create and assign the following policies:

To ensure that devices are compliant with the assigned rules and policies, you can create and assign a Mobile Compliance Policy to the Android devices. The Mobile Compliance Policy contains a pre-defined event based on which the compliance of a device is monitored. This policy enables you to audit, restrict and remediate devices that do not comply with the pre-defined event.

If a device is non-compliant and if the restrict action is imposed on the device, as configured in the policy, then the work apps on the device are restricted. As a remediation action, the work profile is removed from the device and work-managed devices are factory reset. These devices are subsequently unenrolled from ZENworks and retired.

To unenroll the organization from the Android in the enterprise program, you should delete the Android Enterprise subscription from ZENworks Control Center.