Device Owner Settings (PLUS, provisioned devices only)

• Lock Task Mode  – Better kiosk mode protection, disable home and recent task button, disable status bar (in Kiosk mode only).
  • Enable Lock Task Mode
  • App Lock Task Whitelist – allow selected apps to enter the lock task mode, one package name per line. Starting ver. 1.43 apps started by Fully Kiosk will be whitelisted automatically.
  • Enable Home Button – force show home button in lock task mode (Android 9+)
  • Enable Recent Task Button – force show recent task button in lock task mode (Android 9+)
  • Enable Notifications – enable status bar and notifications in lock task mode (Android 9+)
  • Enable System Info – enable system info in the task bar in lock task mode (Android 9+)
  • Enable Keyguard – enable showing screen lock in Lock Task Mode (Android 9+)
  • Enable Showing Global Actions – enable showing global actions on long power button press in lock task mode (Android 9+)
• Disable Status Bar – better disable status bar (in Kiosk mode only)
• Disable Keyguard – Enabling this option has the same effect as choosing “None” for the Screen Lock type. However, this option has no effect if a password, pin or pattern is currently set. You must enable this option if you want to disable Screen Lock on provisioned devices. However disabling the swipe screen lock automatically doesn’t work on some devices. Look for experimental Unlock Swipe Screen Lock option in Device Management Settings for alternative or set the Screen Lock to None by hand.
• Mute Audio and Disable Volume Buttons
• Disable Screen Capture
• Disable USB Storage
• Disable ADB
• Disable Boot in Safe Mode – this doesn’t work 100% with all devices
• Location Mode – Force enable or disable location service at app start (ver. 1.59+)
• System Update Policy – select policy for over-the-air system updates: as soon as possible, postpone for 30 days or only in time window 10pm-2am
• Password Quality
• Minimum Password Length
• App Runtime Permission Policy – default runtime permission policy: prompt, grant or deny
• Additional User Restrictions – Apply other user restrictions by policy, one restriction per line. Check Android docs for IDs (use values like no_add_user, no_add_wifi_config, no_adjust_volume etc.)
• Disable Apps From Unknown Sources – disable app install from APK file
• APK Files to Install – enter one URL per line, silent install can be done with Android 6+, requires Disable Apps from Unknown Sources to be switched off.
• APK File Update Interval – Check for APK updates according to Last-Modified server response header each X minutes, min. 15 minutes, set 0 for disabled
• APK File Update Time – Check for APK updates according to Last-Modified server response daily at this time HH:MM, empty: disabled (ver. 1.56+)
• System Apps to Enable – enable selected system apps, one package name per line. By default most pre-installed apps are disabled by device provisioning. When making provisioning by QR method you can select to keep the apps in the provisioning set configuration
• Apps to Disable – disable access to selected apps, one package name per line
• Credential Manager Policy – select the credential permission policy (Android 14+, FKB 1.61.3+)
• Credential Manager Package List – allowed/blocked credential manager, one package name per line, * for all allowed (Android 14+, FKB 1.61.3+)
• APN Config – add custom APN configuration, one per line, like this:

entryName=APN1;apnName=mbb.mobi-data.com;operatorNumeric=26006;protocol=2;roamingProtocol=2
entryName=APN2;apnName=mbb2.mobi-data.com;operatorNumeric=26006;protocol=2;roamingProtocol=2

Also supports optional apnTypeBitmask and carrierEnabled fields.

• Global Proxy Config – provide global proxy address as host:port or provide a full pac URL
• Daily System Restart – Scheduled time (HH:MM in 24h format) for automatic system restart, keep empty for disabled (ver. 1.49+)
• Remove Device Owner (EXPERIMENTAL) – unregister our app as device owner, can be used to uninstall the kiosk app from provisioned device