13.1 Types of Enrollment

ZENworks lets you enroll your devices in either of the following ways:

  • Managed Device: Enables ZENworks to fully manage a device by performing various device management operations such as apply policies to the device, deploy applications on the device, synchronize email for Exchange ActiveSync accounts, and capture device information (inventory). Only iOS or Android devices can be enrolled as fully managed devices. Full management of an Android device is performed through the ZENworks Agent App that is hosted on the Google Play Store. Full management of an iOS device is performed through the device’s in-built MDM client.

    To enable ZENworks to manage the Exchange ActiveSync capabilities on these devices, you need to ensure that a Mobile Email Policy is assigned to these devices or users. This policy should use the ZENworks Server as the proxy server between the configured ActiveSync Server and the enrolled device.

    In the assigned Mobile Email Policy, you also have the option to directly relay mails from the configured ActiveSync Server, however in this case, ZENworks will not manage the corporate email account configured on the device. For more information on configuring email access, see Configuring Email Access.

  • Email Only (ActiveSync Only): Enables ZENworks to manage only the corporate email account on the device. Also, certain policies that are enforceable through the ActiveSync protocol can be applied. Mobile devices are enrolled to the ZENworks MDM Server using the ActiveSync email clients present on the devices. Android, iOS, and Windows devices can be enrolled as Email Only devices. Devices enrolled as Email Only devices can be managed in the following ways:

    • Server Only Mode: In this case, the device will be unable to send or receive emails. ZENworks can only apply certain policies that are enforceable through the ActiveSync protocol, such as the Mobile Device Control Policy and Mobile Security Policy, and can remotely wipe the devices. This might occur due to any one of the following reasons:

      • A Mobile Email Policy is not assigned to the device.

      • The assigned Mobile Email Policy does not use ZENworks as the proxy server between the configured ActiveSync Server and the device. The policy directly connects to the configured ActiveSync Server.

      • The ActiveSync server is not linked to the associated user source.

      • The ActiveSync server is not valid for the user.

    • Proxy Mode: In this case, corporate emails on the device will be managed by ZENworks. Also, ZENworks can apply certain policies that are enforceable through the ActiveSync protocol, such as the Mobile Device Control Policy and Mobile Security Policy, and can remotely wipe the devices. In a proxy mode, a Mobile Email Policy, with the ZENworks Server acting as the proxy server, is assigned to the device or the user.

    For more information on configuring an ActiveSync Server and a Mobile Email Policy, see Configuring Email Access.