Enrolling Android Devices
To manage an device, it must be enrolled.
There are two ways you can enroll Android devices: as a user-owned device, which permits the user to retain ultimate control over the device, or as a work-managed device, where Deep Freeze Cloud Console has control over what apps can be installed and what administrative functions are available.
Note that you must configure a connection to Android for Work before you can enroll Android devices.
Selecting the Default Group
When you enroll an Android device, it is automatically assigned to the default group. The same default group applies to both user-managed and work-managed enrollments, but note that you can move devices to a different group at any time.
1. Go to MDM > Devices.
2. Click the Android icon.
3. Click Enroll Device.
4. Use the Assign to group field to select a default group. Newly enrolled devices will be placed in this group.
Enrolling an Android Device as a Work-managed Device
Enrolling a device as a work-managed device gives more control to the Deep Freeze Cloud Console administrator. A work-managed device restricts the user from installing apps other than the ones specified by the administrator; only apps specified by the administrator will be visible in the Google Play Store.
Enrolling an Android device as a work-managed device is a two step process: first, the device must be wiped (assuming it is not a brand new device), then it must be enrolled during the initial device setup. There are three methods for enrolling the device: you can enter an enrollment code, you can scan a QR code, or you can enter an activation code. Note that each of these methods has different prerequisites.
Step 1: Reset the device to factory defaults
Unless the device is brand new, out of the box, it will need to be wiped of all user data before it can be configured as a work-managed device.
How to reset the device depends on the model of device – consult the device instructions.
Step 2 (option 1): Enter the DPC Identifier during device setup
To use this method, the device must run Android 6.0 (Marshmallow) or above.
1. Switch on the device, then wait until it displays the initial language selection screen.
2. Select the language you want to operate in.
3. Touch Start.
4. In the Wi-Fi screen, select a wireless network and provide the credentials necessary to connect to it. Once you are connected, touch Next.
5. Agree to the Terms and Conditions, then touch Next.
6. In the Add your account screen, enter afw#deepfreeze into the Email or phone field. Touch Next.
7. Follow the prompts on the device to continue device configuration. If prompted, download and install the Deep Freeze MDM app.
8. In the Enroll in Deep Freeze MDM screen, do one of the following:
> Enter the enrollment code displayed by the Deep Freeze Cloud Console at MDM > Devices > Enrollment > Android under the Using DPC Identifier heading, then touch Enroll this device.
> Touch the camera icon to activate the camera, then use the camera to scan the QR code displayed by the Deep Freeze Cloud Console at MDM > Devices > Enrollment > Android, under the Using DPC Identifier heading. Note that this page displays two QR codes; the smaller one is required for this procedure.
9. Follow the prompts on the device to complete device configuration.
Step 2 (option 2): Scan the Deep Freeze QR code during device setup
To use this method, the device must run Android 7.0 (Nougat) or above.
1. Switch on the device, and wait until it displays the initial language selection screen.
2. Select the language you want to operate in.
3. Tap the device screen six times. The device displays the QR code setup screen.
4. Touch Next to proceed to the Get connected screen.
5. Select a wireless network and provide the necessary credentials to connect to it.
6. Once the device is connected, it will active the camera. Use the camera to scan the QR code displayed by the Deep Freeze Cloud Console at MDM > Devices > Enrollment > Android under the Using QR Code heading. Note that this page displays two QR codes; the larger one is required for this procedure.
7. Follow the prompts on the device to complete device configuration.
Step 2 (option 3): Generate and use an activation code to enroll the device
This method is only available to devices running Android 5.x (Lollipop).
1. Go to MDM > Devices.
2. Click the Android icon.
3. Click Enroll Device.
4. Click the Work Managed Devices tab.
5. Enter your G Suite administrator email address into the Enter your work email address field.
6. Click Generate.
Deep Freeze Cloud Console generates a numerical Activation Code and displays it underneath the email address. Record this code; it will be required when enrolling the device. Note that the same code can be used to enroll multiple devices.
7. Switch on the device, then wait until it displays the initial language selection screen.
8. Select the language you want to operate in.
9. Touch Start.
10. In the Wi-Fi screen, select a wireless network and provide the credentials necessary to connect to it. Once you are connected, touch Next.
11. Agree to the Terms and Conditions, then touch Next.
12. In the Add your account screen, touch the menu icon (the three vertical dots at the top right) and select Set up work device.
13. Enter the email address you used to generate the activation code into the Email address field, and the generated activation code into the Activation code field. Touch Set Up.
14. You may be prompted to encrypt your device. If so, touch Encrypt, then follow the instructions to continue. Note that your device will reboot as part of this process.
15. Follow the prompts on the device to continue device configuration. If prompted, download and install the Deep Freeze MDM app.
16. If the device runs Android 5.0 or 5.1, you must update the Google Play Store before enrolling in Deep Freeze MDM. For other versions of Android, skip this step.
A. When the Enroll in Deep Freeze MDM screen appears, skip the enrollment process. Follow the prompts to complete device configuration.
B. Launch the Play Store.
C. Under the Settings menu, tap Play Store version. The Play Store will update itself to the latest version.
D. Close the Play Store.
E. Open the Deep Freeze MDM app.
17. In the Enroll in Deep Freeze MDM screen, do one of the following:
> Enter the enrollment code displayed by the Deep Freeze Cloud Console at MDM > Devices > Enrollment > Android under the Using DPC Identifier heading, then touch Enroll this device.
> Touch the camera icon to activate the camera, then use the camera to scan the QR code displayed by the Deep Freeze Cloud Console at MDM > Devices > Enrollment > Android, under the Using DPC Identifier heading. Note that this page displays two QR codes; the smaller one is required for this procedure.
18. Follow the prompts to complete device configuration.
Enrolling an Android Device as a User-owned Device
Configuring a mobile device as a user-owned device gives more control to the user. The user of the device can install their own apps in addition to the apps installed by the administrator via Deep Freeze MDM.
While devices enrolled as user-owned devices are typically owned by their respective users, nothing prevents you from enrolling company devices as user-owned.
Complete the following steps on the Android device:
1. Go to the Google Play Store.
2. Search for Deep Freeze MDM.
3. Click Install.
4. Launch the Deep Freeze MDM app.
5. Specify the network ID in the format XXX-XXX-XXXX. Alternatively, you can also scan the QR code.
6. Click Enroll this device.