Zx Mobile Mobile Device Management a.k.a. Mobile Provisioning

From ZeXtras Suite Wiki

Jump to: navigation, search
Language: English  • español • português
ZxMobile logo box.png
Available since ZeXtras version: 1.10
Latest Version: 2.12.2
Released on: January 2nd, 2019
Compatibility List
Admin Guide
FAQ
Troubleshooting
Device List
ZspMobile logo box.png

What is Mobile Device Management?

Mobile Device Management (MDM - also known as Provisioning) allows an Administrator to define a set of rules and security settings that are applied Over The Air to one or more mobile devices, ranging from PIN policies to Allowed/Blocked app lists and including "one time" commands such as the remote wipe of the entire device.

MDM effectively allows the administrators to limit and restrict the use of corporate mobile devices in order to avoid as many risky or improper behaviours as possible.

On top of this, MDM is also a priceless aid in carrying on "Bring Your Own Device" corporate policies, allowing users to connect their personal mobile devices to the corporate servers reducing the risk of security breaches to a bare minimum.

Provisioning features available on your client

Not all Provisioning features are available on all clients. A good comparison of Exchange ActiveSync clients can be found on Wikipedia

ZeXtras Suite and MDM

ZeXtras Suite features advanced MDM features through the Exchange ActiveSync protocol version 14+.

Mobile policies can be enabled at COS and Mailbox level, allowing both a quick "one for many" setup and a user-based customized managment. In both cases, Mobile Management Options are available within the "ZxMobile" tab.

ZxMobile Provisioning1.png

Provisioning Options

The following provisioning options are available:

  • Enable Mobile Policy: Enable or Disable the use of Mobile Policies for the current user/COS.
  • Allow non-provisionable devices: Allow the user to synchronize any device that does not support provisioning.
  • Allow partial policy enforcement on device: Allow the user to synchronize any device that does not support one or more applicable policies.

Enforceable Policies

Enforceable Policies are available right below to the "Mobile Devices" list, grouped in the following categories:

ZxMobile Provisioning2.png ZxMobile Provisioning2b.png

  • Sync Settings - Set synchronization spans and limits.
  • Device Settings - Enable or Disable device features such as Camera, WiFi, Removable Storage or Bluetooth.
  • Device Security Settings - Force an unlock code and define the minimum requirements for the code itself.
  • Device Applications - Enable or Disable "standard" device applications such as the Browser and POP/IMAP client or unsigned apps.

Two lists are also available for application whitelist/blacklist management:

ZxMobile Provisioning3.png

  • Approved Applications - A customizable list of approved applications.
  • Blocked Applications - A customizable list of blocked applications that won't be usable on the device.

Mobile Password

While conceptually similar, the Mobile Password feature is not part of the Mobile Device Managment and can be used with any version of the EAS protocol.

Personal tools