Device Administration

http://developer.android.com/guide/topics/admin/device-admin.html

• A system administrator writes a device admin application that enforces remote/local device security policies. These policies could be hard-coded into the app, or the application could dynamically fetch policies from a third-party server.

• The application is installed on users' devices. Android does not currently have an automated provisioning solution. Some of the ways a sysadmin might distribute the application to users are as follows:

1. Google Play.
2. Enabling installation from another store.
3. Distributing the application through other means, such as email or websites.

• The system prompts the user to enable the device admin application. How and when this happens depends on how the application is implemented.

• Once users enable the device admin application, they are subject to its policies. Complying with those policies typically confers benefits, such as access to sensitive systems and data.

Policy:

• Password enabled
• Minimum password length
• Alphanumeric password required
• Complex password required
• Minimum letters required in password
• Minimum lowercase letters required in password
• Minimum non-letter characters required in password
• Minimum numerical digits required in password
• Minimum symbols required in password
• Minimum uppercase letters required in password
• Password expiration timeout
• Password history restriction
• Maximum failed password attempts
• Maximum inactivity time lock
• Require storage encryption
• Disable camera