Miradore Management Suite Portal

Support

Support

Knowledge base, self-service support

About configuration profiles

Follow

Configuration profiles are intended for managing the settings or configurations of different device features in a remote and centralized way. Each configuration profile defines a range of settings concerning a specific feature. Each device can have multiple configuration profiles assigned to it.

For example, you can create separate configuration profiles for the Wi-Fi settings of company's Head office and branch office, and then remotely deploy the correct Wi-Fi settings profile to managed devices based on the location where they are used.

The point is that you don't always have to configure the settings for each device again, but instead you can store the once defined settings, and then deploy them to other devices as well. You only need to select what settings you wish to deploy, and what are the devices where the settings should be applied to. Therefore, the configuration profiles provide an easy way to enforce company policies, and to standardize the settings considering different device features in all managed devices.

 

What can be configured with the configuration profiles

The features which can be configured using the configuration profiles vary to some extent between the different device platforms (Android, iOS, Windows Phone). There can also be some minor differences in how the settings of some device feature are configured on different platforms.

 

Configuration profile           iOS        Android Windows Phone
  Mail for Exchange
  Wi-Fi
  Roaming
  Kiosk mode -
  Location tracking -
  Passcode
  Storage card (enable/disable)
- -
  Device encryption
  Email -
  Restrictions
  VPN - -
  Application blacklist
  Application whitelist   
  Web shortcut/Web clip  -

 

Details of the configurable device features per each device platform are explained below.

 

Configuration profiles for iOS

Application blacklist

The Application blacklist configuration profile can be used to deny the use of certain applications whereas other applications remain allowed. Here is some fruther information about application black/whitelisting for iOS.

Note: This profile requires that devices are Supervised. This is supported on iOS 9.3 and later. Application blacklisting also requires the Miradore Online Enterprise plan.

 

Application whitelist

The Application whitelist configuration profile can be used to allow the use of certain applications whereas the use of all other applications are blocked. Here is some fruther information about application black/whitelisting for iOS.

Note: This profile requires that devices are Supervised. This is supported on iOS 9.3 and later. Application whitelisting also requires the Miradore Online Enterprise plan.

 

Device encryption

iOS devices encrypt their memory automatically when a device passcode is activated. 

NoteThis is not an actual configuration profile.

 

Email

Email configuration profile lets you define settings for POP or IMAP email accounts from many email providers, such as Gmail, iCloud, Office365, Outlook, Yahoo!, and many others.

 

Kiosk

Kiosk mode can be used to force an iOS device to run in single app mode. You can define the application to be run and specify which device hardware buttons are active. Kiosk mode cannot be removed by the end-user. You can read more from: Kiosk mode for iOS.

Note: The target device must be in Supervised mode.

 

Location tracking

The location tracking configuration profile can be used to enable location tracking in managed devices. This feature is only available to Business or Enterprise Plan customers.

When the location tracking profile is deployed to a device, the Miradore Online client is installed from the App Store and starts to collect and report location data to the Miradore Online server. The last known location can be seen by opening the device page.

 

Mail for Exchange

The Mail for Exchange configuration profile allows to define settings for Mail for Exchange accounts in managed devices. With the profile, it is possible to configure how often and what content should be synchronized between the device and the Mail for Exchange server.

Note! When you make a modification to the Mail for Exchange configuration profile (for example: Changing the syncing intervals of past emails from 1 week to 1 month), the mail account will be returned to the default settings because of Apple's policy. Therefore, the end-user is prompted to re-input their password for the account by hand. Even if the device states "Cannot Get Mail" - The connection to the server failed". -- press OK. It should work properly again after that message. 

 

Passcode

The passcode configuration profile can be used to control the use of the device passcode protection, including passcode requirements. When a passcode profile is deployed to a device, the device user is forced to use a passcode as defined by the profile settings.

 

Restrictions

The restriction configuration profile can be used to restrict the use of certain device features, applications, services, and content types on Apple iOS devices. These include the use of the camera, YouTube, installation of applications, and many others.

In addition, you can use the restriction configuration profile to force some security settings, such as automated backups or encryption to be used on the devices.

See Restrictions for iOS for more information.

 

Roaming

Use the roaming configuration profile to define whether device(s) are allowed to use data connections when roaming outside of the regular carrier’s network and when other local carrier network(s) are available.

Note: Supported on iOS versions 5 and newer.

 

VPN

Use the VPN configuration profile to define the settings for connecting to a local area network via a virtual private network (VPN), including authentication settings.

 

Web clip

The web clip configuration profile can be used to create bookmarks on the device's home screen.

 

Wi-Fi

Wi-Fi configuration profiles can be used to deploy wireless network settings to managed devices.

 

Configuration profiles for Android

Application blacklist

The Application blacklist configuration profile can be used to deny the use of certain applications whereas other applications remain allowed. Here is some further information about application black/whitelisting for Android.

Note: This profile will function properly only on Samsung devices that run the Android operating system version 4.2 or later.

 

Application whitelist

The Application whitelist configuration profile can be used to allow the use of certain applications whereas the use of all other applications are blocked. Here is some fruther information about application black/whitelisting for Android.

Note: This profile will function properly only on Samsung devices that run the Android operating system version 4.2 or later.

 

Device encryption

The device encryption configuration profile can be used to enable encryption for the device storage. HEre is some further information about device encryption for Android.

Note: After encryption is enabled, it cannot be disabled.

 

Kiosk

The kiosk mode configuration profile can be used to restrict the device user from leaving a specified home screen application. The device user will be unable to change device settings or run other applications. In addition, the use of device's some hardware buttons can be prevented.

Note: The kiosk settings will function properly only on Samsung devices that run the Android operating system version 4.2 or later.

 

Location tracking

The location tracking configuration profile can be used to enable location tracking in managed devices. This feature is only available to Business or Enterprise Plan customers.

When the location tracking profile is deployed to a device, it starts to collect and report location data to the Miradore Online server. The last known location can be seen by opening the device page

 

Mail for Exchange

 

The Mail for Exchange configuration profile allows to define settings for Mail for Exchange accounts in managed devices. With the profile, it is possible to configure how often and what content should be synchronized between the device and the Mail for Exchange server.

Note: This configuration profile will function properly only on Samsung KNOX enabled devices running Android operating system version 4.2 or later.

 

Passcode

Passcode configuration profile can be used to control the use of device passcode protection, including passcode requirements. When a passcode profile is deployed to a device, the device user is forced to use a passcode as defined by the profile settings.

 

Restrictions

The restrictions configuration profile allows the administrator to disable certain device features altogether. When a feature is disabled, the end user can no longer modify the state of said feature without the administrator first removing the profile.

See Restrictions for Android for more information.

Note: This configuration profile will function properly only on Samsung KNOX enabled devices running Android operating system version 4.2 or later.

 

Roaming

For Android devices, use the Restrictions configuration profile to define roaming settings.

 

Web shortcut

The web shortcut configuration profile can be used to create bookmarks on the device's home screen.

 

Wi-Fi

Wi-Fi configuration profiles can be used to deploy wireless network settings to managed devices.

 

Configuration profiles for Windows Phone

Application blacklist

The Application blacklist configuration profile can be used to deny the use of certain applications. You can read more about application black/whitelisting for Windows Phone here.

Note: Only available on Windows Phone 8.1 devices.

 

Application whitelist

The Application whitelist configuration profile can be used to allow the use of certain applications. You can read more about application black/whitelisting for Windows Phone here.

Note: Only available on Windows Phone 8.1 devices.

 

Device encryption

The device encryption profile can be used to enable encryption for device’s internal storage.

Note: After encryption is enabled, it cannot be disabled.

 

Email

The email configuration profile lets you define settings for POP or IMAP email accounts from many email providers, such as Gmail, iCloud, Office365, Outlook, Yahoo!, and many others.

 

Mail for Exchange

The Mail for Exchange configuration profile allows to define settings for Mail for Exchange accounts in managed devices. With the profile, it is possible to configure how often and what content should be synchronized between the device and the Mail for Exchange server.

 

Restrictions

The restriction configuration profile can be used to restrict the use of certain device features and applications on the Windows Phone devices. These include for example, the use of the application store and browser.

Note: Only available on Windows Phone 8.1 devices.

See Restrictions for Windows Phones for more information.

 

Roaming

For Windows Phones, use the Restrictions configuration profile to define roaming settings.

 

Passcode

Passcode configuration profile can be used to control the use of device passcode protection, including passcode requirements. When a passcode profile is deployed to a device, the device user is forced to use a passcode as defined by the profile settings.

 

Storage card

The storage card profile can be used to enable or disable storage card usage on the target device.

 

Wi-Fi

Wi-Fi configuration profiles can be used to deploy wireless network settings to managed devices.

Note: Only available on Windows Phone devices running WP 8.0 Update 3 and newer.

 

More information:

How to create a configuration profile

How to deploy configuration profile(s)

How to delete configuration profile(s)


Please send comments to contact@miradore.com.