What company-owned device management means
In the company-owned, business-only model (COBO), the organization buys the phone or tablet, gives it to an employee and expects it to be used for work. Because there is no personal side to protect, IT can manage the whole device: which apps exist, which settings can change, how the screen is locked and what happens when the device is lost.
On Android this is called a fully managed device. During setup, the management app is made the device owner, which gives it the strongest set of controls Android offers. You can read more about the model in device ownership models and what Android Enterprise is.
What IT can control
Once a device is enrolled, DeepManage applies the policy of its group. A typical policy for company-owned devices includes:
- Security rules: screen lock and password requirements, and blocking of factory reset or USB file transfer.
- Hardware and OS restrictions: turn off the camera, Bluetooth, USB storage or developer options where they are not needed. See policies and restrictions.
- Apps: business apps installed and updated silently, with allow and block lists. See app management.
- Inventory and reports: hardware, OS version, network and usage data for every device, ready to export from reports.
When something goes wrong, the console gives you direct actions: lock the device, make it ring, wipe it, or open a Live Control session to see and fix the screen remotely.
Enrollment without manual work
Fully managed devices are enrolled from the setup screen of a new or reset device. DeepManage supports QR code and NFC enrollment, and enrollment profiles decide which group and policy a device joins. A device can be enrolled for a named user or as a userless device and paired with a user later. Details are on the device enrollment page.
Keeping control after the first day
Company-owned devices change hands, travel and get lost. With location and geofencing you can see where a device was last reported, and with security and compliance rules a non-compliant device can be restricted automatically until it is fixed.
Cloud or on-premises
Organizations with strict data rules, such as public institutions and defense, often run DeepManage on their own servers. Others prefer the cloud service. Both run the same product with the same features; compare them on the deployment options page.
Is COBO the right model for you
COBO fits when the device belongs to the organization and is used only for work. If staff use their own phones, a work profile on personal devices is the better fit. If the device runs a single app for everyone, look at kiosk and dedicated devices.