II Enrolling Mobile Devices

This section explains the manner in which mobile devices can be enrolled in the zone. The topics discussed are as follows:

Before enrolling (registering) a device to the ZENworks Management Zone, you need to understand the different ways in which ZENworks can manage a device. This will help you in evaluating the manner in which the device needs to be managed, thereby enabling you to select the right enrollment options.

ZENworks lets users enroll their devices as a managed device or as an email only device. You can set this option in the Mobile Enrollment Policy.

  • Managed Device: Enables ZENworks to fully manage a device by performing various device management operations such as apply policies to the device, deploy applications on the device, synchronize email for Exchange ActiveSync accounts, and capture device information (inventory). Only iOS, or Android devices can be enrolled as fully managed devices. Full management of an Android device is performed through the ZENworks Agent App that is hosted on the Google Play Store. Full management of an iOS device is performed through the device’s in-built MDM client.

  • Email Only (ActiveSync Only): Enables ZENworks to manage only the corporate email account on the device. Also, certain policies that are enforceable through the ActiveSync protocol can be applied. Mobile devices are enrolled to the ZENworks MDM Server using the ActiveSync email clients present on the devices. Android, iOS, and Windows devices can be enrolled as Email Only devices. Devices enrolled as Email Only devices can be managed in the following ways:

    • Server Only Mode: In this case, ZENworks will not be managing the email account on the device. ZENworks can only apply certain policies that are enforceable through the ActiveSync protocol, such as the Mobile Device Control Policy and Mobile Security Policy. ZENworks can also remotely wipe the devices. This might occur due to any one of the following reasons:

      • A Mobile Email Policy is not assigned to the device.

      • The assigned Mobile Email Policy does not use ZENworks as the proxy server between the configured ActiveSync Server and the device. The policy directly connects to the configured ActiveSync Server.

      • The ActiveSync server is not linked to the associated user source.

      • The ActiveSync server is not valid for the user.

    • Proxy Mode: In this case, corporate emails on the device will be managed by ZENworks. Also, ZENworks can apply certain policies that are enforceable through the ActiveSync protocol, such as the Mobile Device Control Policy and Mobile Security Policy, and can remotely wipe the devices. In a proxy mode, a Mobile Email Policy, with the ZENworks Server acting as the proxy server, is assigned to the device or the user.