Virtually every organization uses company-specific applications. In this article, we’d like to share some recommendations—based on specific examples from one of our customers in the logistics industry—on how to get the most out of these applications and configure them using Miradore.
Seamless Integration between Miradore and In-house Systems
Automating as many steps as possible is particularly beneficial when dealing with a large number of devices. There are many options for automation, especially when using mobile devices in conjunction with various specialized applications such as logistics software, VoIP systems, fleet management, point-of-sale systems, and much more:
- Automatic, usage-specific enrollment and app/account setup, as well as data protection
- Kiosk mode, including availability of certain settings
- Call settings, including contact list, volume, and filters for outgoing and incoming calls
- Reduced data usage through tethering restrictions, URL filters, and notifications about SIM card changes
- Fast and secure remote access for support tasks
- Data transfer to external tools for data usage tracking and internal billing
The solutions implemented to date have not only made the setup of end devices more than 90% more efficient; but savings of between 23% and 90% were also achieved during the operational phase in mobile phone expenses, manual call routing, and support costs.
Below is a list of requirements from a customer in the logistics and retail sector, along with a brief description of how these were met using Miradore and free third-party systems/apps (for Android).
Shipment to the Location and Automatic Registration
- Use of the free Samsung KNOX Mobile Enrollment platform, which registers devices with Miradore immediately upon startup
- Devices should be automatically assigned to users—but not individually, rather via a list provided by the hardware supplier Import the device identifiers (IMEI) and assign them to the respective users
Result: The devices were shipped directly from the supplier to their respective locations. The on-site administrator enables the devices, which are automatically registered in the system and assigned to the user.
Direct Allocation of Apps and Accounts by Type of Use
- Creating user groups based on tags. Relevant apps—including those with the appropriate configuration, such as for email—were distributed via Business Policies.
- Users should be prevented from installing apps, creating accounts, or activating an account lock (Google Factory Reset Protection Mode).
- Account modification has been disabled due to restrictions, which prevents end users from using accounts—including Google Accounts—for app installation, among other things.
- Every user should be prompted to enter a passcode or PIN to prevent data leakage in the event of loss or theft.
- This was ensured through a passcode policy. In addition, a lock screen message was set up to inform potential finders about the device's ownership.
Result: All devices were set up with apps and accounts right away. Any unintended use—including, but not limited to, social media or gaming—was prevented. In addition, this ensured compliance with the GDPR.
Simple Kiosk Mode for Certain Devices to Enable More Efficient Use
- By enabling the “Home screen & Kiosk” configuration profile, the interface was designed so that apps can be found right away.
- It should be possible for an administrator to remove devices from kiosk mode.
- Using the “static exit code” for kiosk mode, this feature can be disabled on the device itself.
- Even in kiosk mode, it should be possible to connect Bluetooth devices such as headsets and scanners.
- The Bayton Managed Settings app allows you to enable individual settings in kiosk mode.
Result: The desired devices are in kiosk mode; only a limited selection of apps is available. Bluetooth devices can be connected.
Customizing Volume Settings
- By using the OEM Config App KNOX Service Plugin (exclusively for Samsung devices) and configuring the following settings:
Device and Settings Customization Profile (Premium) → Audio Volume Controls → Set Audio Volume → Audio Stream: “RINGER”
Device and Settings Customization Profile (Premium) → Audio Volume Controls → Set Audio Volume → Volume Level: “15”
Device-wide policies → Device customization controls (Premium) → Device-wide policies → Device customization controls (Premium) → Enable device customization: “True”
Device-wide policies → Enable device policy controls (Premium): “True”
Distribution of Contacts
- This requirement was easily implemented by assigning contacts through the corresponding configuration profile in Miradore.
Restrictions on Call Destinations to Reduce Costs (Certain Countries/Premium-Rate Numbers)
- By using the OEM Config App KNOX Service Plugin and configuring the following parameters:
Device-wide policies > Call and Messaging control > Call Controls > Enable call and messaging controls: “True”
Device-wide policies > Call and Messaging control > Call Controls > Blocklist Outgoing Call restriction, e.g., “.*” (Adjust the regex as needed)
Device-wide policies > Call and Messaging control > Call Controls > Blocklist Outgoing Call exception, e.g., “^(\+49\d+|0049\d+|0[1-9]\d*)$” (Adjust the regex as needed)
Device-wide policies > Call and Messaging control > Call Controls > Blocklist
Incoming Call restriction, e.g., “.*” (Adjust the regex as needed)
Device-wide policies > Call and Messaging control > Call Controls > Blocklist Incoming Call exception, e.g., “^(\+49\d+|0049\d+|0[1-9]\d*)$” (Adjust the regex as needed)
Device-wide policies > Call and Messaging control > Enable device policy controls: “True”
Result: Smartphones are a perfect replacement for DECT devices for many reasons: ease of use, existing phone number, protection against calls from specific sources and phishing, and the ability to block calls to expensive destinations.
Restrictions on Mobile Data Usage
- From the very beginning, only apps needed for work were installed on the device.
- The Chrome browser was restricted to certain websites via a Managed App Config.
- Tethering was disabled via a configuration profile (Restrictions) for Android.
- SIM card change notifications were enabled in case the SIM card was removed to be used in other devices in the meantime.
Result: The smartphone shows a significant reduction in mobile data usage.
Device Access via a Remote Support Tool
This is on the condition that the user has to grant as few permissions as possible to the tool, while still ensuring that privacy is protected.
- Miradore Premium+ includes the LogMeIn Resolve remote support tool. To start remote support, the user must enter a 9-digit number provided by the support team. Sessions are recorded to document proper use.
- To configure all app permissions for the support tool in advance, the “KNOX Service Plugin” OEM Config was used again:
Add applications for accessing the Knox SDK -> Add applications for accessing the Knox SDK > Package name: “com.goto.resolve.customer”
Add applications for accessing the Knox SDK -> Add applications for accessing the Knox SDK > Scope: “authorization_remote_control”
Device-Wide Policies -> Enable device policy controls: “true”
Device-Wide Policies -> Application Management Policies -> Enable application management controls: “true”
Device-Wide Policies -> Application Management Policies -> Enable Add applications for accessing Knox SDK: “true”
Device-Wide Policies -> Application Management Policies -> Enable permission controls: “true”
Result: If necessary, support staff can quickly and easily connect to the smartphone—while complying with data protection regulations—view the screen and perform actions.
External Analysis of Device Data
- Using Miradore APIv1, data usage per device—for both roaming and non-roaming—was retrieved and automatically analyzed.
- Data from “Custom Attributes” was automatically retrieved via Miradore APIv2 and processed accordingly for internal reporting and internal billing.
Result: If any unusual data usage is detected, immediate action can be taken. In addition, internal billing and reporting can be automated.
FAQ
FAQ 1: “Can I set up multiple devices quickly and automatically with the required apps?”
Yes, with Miradore you can automatically register devices in the system as soon as they're switched on, automatically assign them to the correct users via device identifiers, create user groups based on tags, and assign these groups specific apps with pre-configured settings (e.g., email accounts) via Business Policies. This reduces setup time by 90%. Devices can be shipped directly from the supplier to the locations and only need to be switched on by the admin on-site. Everything else happens automatically.
FAQ 2: “How do I prevent employees from using their work devices for private purposes?”
With Miradore you can activate Kiosk Mode to make only a limited selection of work apps visible, prevent users from installing private apps, block Google Account access, and enforce passcode policies. At the same time, this fulfills GDPR requirements and ensures data protection is maintained.
FAQ 3: “How can I reduce mobile costs when our employees are traveling internationally?”
With Miradore you can restrict call destinations (only allowing approved countries/phone number ranges), prohibit tethering, set up URL filters, and enable SIM change notifications. Thanks to these configurations, savings of between 23–90% on mobile expenses can be achieved.
by Andreas Handler
Andreas works as a Senior Technical Consultant and Customer Success Manager at Miradore. He has been part of the Miradore family since 2016 and is passionate about providing value to organizations by showing them how to increase efficiency with Mobile Device Management. Outside of work, you might find him bouldering or playing volleyball.
