Lockdown

Use the Lockdown profile configuration to restrict a device to a custom kiosk display. Lockdown replaces the standard device home screen with a customizable interface that provides the user access to authorized applications and device features only. Applications and data protection feature controls can be enabled through the Feature Control profile configuration.

The Lockdown menu can only be dismissed by an administrator.

When you create a Lockdown profile configuration, you must also create an Authentication profile configuration with a Device Administrator Password configured. This allows you to dismiss the Lockdown menu directly from the device. You can also choose to configure a User Password Policy. If a user password policy is not defined, device users can access the lockdown menu immediately after turning on the device. If a user password policy is defined, device users must enter the password to access the lockdown menu.

Once activated, Lockdown mode can be disabled in two different ways: you can revoke the lockdown profile configuration or you can disable it directly from the device. On a device with lockdown enabled, you can access the Administrator menu by swiping up from the bottom of the screen or pressing the back button of the device. Enter the administrator password specified in the Authentication profile configuration associated with the Lockdown profile configuration.

Advanced Lockdown Settings

Package Blocking

SOTI MobiControl also offers an alternative to the default Lockdown method. Package blocking prevents applications from launching or running in the background unless explicitly allowed by the active Lockdown policy. Package blocking can be overly restrictive and cause issues by inadvertently blocking system applications. Only enable package blocking after careful testing of the Lockdown configuration on all models and configurations of the devices in your deployment, and only where over-the-air updates are prevented.

Samsung Package Disabling

On some Samsung devices, you can disable undesired activities at the package level. This option is only available on Samsung devices running Android 5.0 or later with MDM 5 or later and that have a SOTI MobiControl agent 13.3.1 installed.

Speed Control

You can configure lockdown to activate when the device exceeds a certain speed. SOTI MobiControl uses the device's GPS unit to determine the device's speed. Speed Control lockdown is automatically deactivated once the device drops below the set speed again.

Templates

On the device, the Lockdown menu is displayed as an HTML web page. The template drop-down box in the Lockdown configuration allows you to select a new HTML template from a list of default templates or create your own custom templates.