Advanced keyguard feature management
This configuration disables selected lock screen features on managed devices.
The Advanced keyguard feature management configuration disables individual features of the lock screen (keyguard) of Android Enterprise devices, such as the camera, notifications or biometric unlock methods. The lock itself remains in place. Requirements for the device lock password are defined via the Device password → configuration.
Supported Enrollment Types
The Managed Device badge in the form indicates that the configuration is intended for company-owned devices:
- Managed device →
- Managed device with a personal profile →
The configuration is not intended for devices with a work profile → (BYOD). It can only be added once per policy.
Disabling Device Keyguard Features
The General section contains one checkbox per feature. None of them is selected for a new configuration. Each selected checkbox disables the respective feature on secure lock screens.
| Option | Effect (hint text in the portal) |
|---|---|
| Disable all | Disables all current and future keyguard customizations |
| Disable biometrics | Disables all biometric authentication on secure keyguard screens |
| Disable camera | Disables the camera on secure keyguard screens (e.g. PIN) |
| Disable fingerprint sensor | Disables the fingerprint sensor on secure keyguard screens |
| Disable remote input | Disables text entry into notifications on secure keyguard screens |
| Disable facial recognition | Disables facial recognition for authentication on secure keyguard screens |
| Disable iris scanner | Disables the iris scanner for authentication on secure keyguard screens |
| Disable notifications | Disables showing all notifications on secure keyguard screens |
| Disable trust agents state | Ignores the trust agent state on secure keyguard screens |
| Hide sensitive content from notifications | Hides sensitive content from notifications on the lock screen |
When Disable all is selected, all other checkboxes are cleared and disabled, as they are already included in this selection. The individual features can only be selected again after Disable all is cleared.
Difference from Restrictions
The Restrictions → configuration contains the option Disable keyguard. This option affects the keyguard as a whole, whereas Advanced keyguard feature management only switches off individual features on the lock screen.