There's a new home for Articles. Find Articles on Our Product Support Page.
This is on A13 devices, i do not have this issue on A11 devices. I have an app that connects to a paried BT printer. The nearby permissions is being "blocked by admin" but i have another app that i push in the same way that that permisison is allowed. does the developer need to requrest the BT related permissions in a different way for SOTI to auto approve?
We have users assigned the Mobi Technicians role as we don't want them to have full Admin rights to the Console. Since we have moved to Mobi Control Cloud and assigned this permission, those users are not able to via Profiles. I contacted support and they said we have to open each profile and edit the permissions and add Mobi Technicians. We have hundreds of profiles as we use them for email etc. is there a work around for this besides making them admins? Thanks Sue
Hello everyone, I would like to know if it is possible to automatically approve the authorizations that MobiControl requests using OEMConfig. In my case it is about Zebra and Samsung devices. Have any of you had any experience with this?
When an Android device upgrades itself to a version it may erase special access rights to MobiControl Agent, such as ACCESS ANY File. Prior to massive deployment, we have tested wich devices have upgrade and lost permissions. In order to test if permissions are grant or not in Android devices we have a package that includes an apk, 2 txt file and a post install script. The apk requests EXTERNAL_ACESS_MANAGEMENT and we do nothing with it. The only reason of its presence is to identify if MC Agent is able to install and grant such permission. After the confirmation it is installed, the post install script uninstall it. If installation has failed, the script stops on this point and the log on scripts helps to identify it. The 2 txt files is to verify if we are able to copy/replace one by another, working as a flag if the MC Agent has rights to delete or overwrite files content. One file has 9 bytes and other 4 bytes. We know it has worked if both stay with 9 bytes. By the list of installation failed we are able to start a remote session to grant the proper rights. This was so, up to Android 14. Android 14 denies the delete, copy/replace action and we could not identify which permission is missing for it. The Log from script writes the file has been deleted and the other one copied, but the scripts hangs as failed, even after writes the log of installation success at the end. By the way, the file sync rules are able to replace the content of the files, but legacy script copy command may not. Below you see the package and its post install script. ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; ; ; Post-Install Script File ; Date Created: quarta-feira, 17 de abril de 2024 ; ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; log -i "ANDROID ANDROID ScanMobAUth2 installed" ;Remove File testeScan2.txt ;It fails here, because the original file is still there del /sdcard/Download/testeScan2.txt log -i "Succes on erase testeScan2.txt " ;It is weird that the log above is registered, even after del command been failed copy /sdcard/Download/versao123.txt /sdcard/Download/testeScan2.txt ;It does not copy and is expected to happen so, when the target already exists with same name and different content log -i "Succes on copy file testeScan2.txt by versao123" ;As before, the log above should not be executed, but is ;uninstall the package uninstall br.com.nobredelatorre.scanmobauth2 log -i "Finishing ANDROID ScanMobAUth " ;it even writes the Finishing log above finishpkg Here comes the package content [Fileoptions] Encrypt=1 Compress=1 Format=1 [Info] Name=ScanMob VersionStr=23.0 CommentStr= Wrap=85 Build=0 BuildDir=C:\Users\Aline\Documents\MobiControl Packages\ScanMob\checked\ WrapDir=C:\Users\Aline\Documents\MobiControl Packages\ScanMob\built\ File=ScanMob.pcg TotalFileSize=1610632 ExtraSize=0 TotalPackageSize=1314126 Processor=ALL Platform=Android ProcessorType=1 PlatformType=7 Osver=2.0-22.0 VendorName= Type=0 Prompt=0 PromptMsg=Install package 'ScanMob' now? PromptTimeout=10 [Files] File1Src=C:\Users\Aline\Downloads\app-release-21.apk File1Path=Internal Storage\app-release-21.apk File1Flags=128 File1Type=17 File1Params= File1Uninst= File2Src=scripts\posti.cmd File2Path=|\posti.cmd File2Flags=256 File2Type=12 File2Params= File2Uninst= File3Src=C:\Users\Aline\Desktop\testeScan2.txt File3Path=%sdcard%\Donwload\testeScan2.txt File3Flags=1 File3Type=0 File3Params= File3Uninst= File4Src=C:\Users\Aline\Desktop\versao123.txt File4Path=%sdcard%\Donwload\versao123.txt File4Flags=1 File4Type=0 File4Params= File4Uninst=
Good Morning, I have an application running on an Android Plus device (Zebra TC52) that requires the ActionNotificationPolicyAccessSettings permission in order to change music/alarm/ring volume. I'm running into an issue where my application is requesting these permissions, but then Mobi Control is hiding the device settings window so users can't toggle the required permissions on. Is there a way to execute this intention and bypass the activity suppression? Thanks, Mark
I have set up some users as Technicians who have limited access to console functions but one area they have always had is Remote Control of all our devices (for support and for training remotely) Now I am being told that these users no longer have Remote Control, only Remote View. I have ruled out the device-- Admin users can control all devices, Techicians cannot control any...all they have is Remote View. All devices are Samsung Tab S4, Android 10, Work Managed, all enrolled using same enrollment rule, all devices in the same folder. Mobicontrol Cloud 15.5 I don't want to have to elevate these users to Admins, all I want to do is grant just those permissions needed to grant Remote Control access-- any advice?Thanks, Matt
We have a number of Android Enterprise devices where the user did not give MobiControl access to all files during enrollment. This causes problems during upgrade/deinstallation of our software to the devices. Is it possible to give the permission using a script?
Good afternoon. Some of our Android Enterprise devices have started updating to Android 12. Our devices are Samsung Tab A7 Lite. I checked our Enterprise profile which contains our feature control and configurations. I was not able to find an option to Disable OS upgrades. We also have older devices enrolled in Android Plus and the feature control for this profile does have an option to disable OS upgrades. Is there a policy script I could send to our Enterprise Tab A7 lite to disable the upgrade? I am okay if the script expires after a set number of days. I am going to continue reading through the forums to see if I can find a good solution. I am also wondering if there is a script available to disable the new android 12 permissions setting "Remove permissions if app is unused"
Looking to see if anyone else knows the other command strings for pulling up the "Special Permissions" for apps, in particular MobiControl, such as this one: start activity com.android.settings/.Settings$OverlaySettingsActivity This one in particular brings up the "Draw over other apps" Setting menu and we are using this assigned to a Launch:// button on the Dynamic Lockdown (which is set to Native). I am trying to write a script that will open the 5 permissions that MobiControl is requesting but can not automatically set - Draw Over Other Apps Manage External Storage Write Settings Notification Access Usage Stats Currently when the notification from MobiControl comes up after the initial installation, sometimes pressing the MobiControl Notification will NOT bring you to the corresponding menu and the user will have to exit out of Lockdown then go to settings to manually change these. While its a shame that these permissions can not be set automatically I know it is a limitation Android has implemented. The end goal that we are trying to reach would be a single button that would bring up the settings menu one by one so the user can set them THEN change the Lockdown to one that does not have that button any longer.
Hello, I have some Samsung tablets in Kiosk mode that I deploy Microsoft Word and Excel via the Managed Google Play Store.When trying to open a document that lives on the tablet (/sdcard/Documents/) for the first time, Word or Excel shows a prompt "To browse Office files, photos, and media, you'll need to allow access to all files in Settings" Not Now | Go to Settings When I press Go to Settings from within a Kiosk screen, Kiosk blocks the settings page to enable Access to all files for Word / Excel. Exiting Kiosk does allow me to enable the permissions, however a user would not be able to grant those permissions from Kiosk mode if Kiosk is blocking the prompt. I did a bit of research for granting the permissions using a Legacy script, but have not been successful. I have tried these, but none of them granted the permission to Access all files:afw_set_permission_grant_state com.microsoft.office.word android.permission.WRITE_EXTERNAL_STORAGE allowafw_set_permission_grant_state com.microsoft.office.word android.permission.READ_EXTERNAL_STORAGE allowafw_set_permission_grant_state com.microsoft.office.word android.permission.MANAGE_EXTERNAL_STORAGE allow Device: Samsung Tab A7 LiteAndroid 11SOTI MobiControl Agent version 15.1.5 1049SOTI MobiControl Console version 15.3 Any ideas would be greatly appreciated. Thank you.
Good Morning! I am wanting to allow certain permissions for several apps without having to go into the device settings. Permissions I am wanting to allow include Location, storage, camera, draw over other apps, modify system settings, install unknown apps. I would like to be able to grant these permissions through a script using the bundle ID if possible?
I've read other posts about this but everything I've tried to this point hasn't worked so I figured I'd open this up to the community. Here is our scenario: MobiControl Cloud instance 15.3 Android Classic device agents 15.0.1.1051 We are using Sonim XP8 devices only. Devices are used in the service industry and are locked down via lockdown screen. Devices have no access to apps outside of what is displayed on the lock down page. Yes, I've tried Android Enterprise but it doesn't work for our environment. Especially the remote assistance part where permission is required. Before Android 10 we were able to roll out APKs and silently install without issue. As we are all aware, when running some apps for the first time, users will be prompted for Location, Storage, Camera, etc. access before use. The problem is, when the device is Locked Down, users can't accept those permissions. Device admins must unlock the device, accept the permissions then lock the device. But even if the user could accept these permissions, they may tap the wrong answer making the apps useless, especially when it comes to location. How do we work around this? It is imperative that when we add or update apps, that our technicians can pick up their devices and get to work without having to deal with prompts and unlocks. If anyone can shed light on this, it would be greatly appreciated. If possible, I'd like to keep answers limited to the SOTI environment only without having to introduce 3rd party solutions mixed in.
Hi all, I'm currently using Android Enterprise - Work Managed devices, with Managed Google Play Account... Mobicontrol version 15.3.2 I have a selection of Add device rules set up and all have the Permissions set on the Rule like below: However at enrolment of the device, I'm experiencing a mix of results and not sure why. For example, once the device is staged as AFW - its on the enrolment screen waiting for a code. We use Mobicontrol Stage and scan barcodes created from the Enrolment ID. This then prompts for username and password (we use ldap authentication) and then it prompts for the Password Policy we set and moves onto the kiosk/lockdown. On some devices, this proceeds and there are no further pending actions. All policies, apps, etc download and the device is enrolled and compliant. However on another device, same model, same staging but perhaps a different Rule - with the same Permissions set - we get prompted in Pending actions and have to manually accept each one and toggle Mobicontrol. I have gone over the Rules and aside from the target and ldap groups these are almost carbon copies. All have the tickboxes set but I'm confused if they mean it should prompt, or should auto grant these? Little baffled on why some do it but not all... Is there something at the profile level that has an effect, or maybe something in feature control that conflicts with this that I'm potentially missing? If anyone can help and offer the intended action it would be much appreciated as we may need to update documentation for user enrolment asap. Many thanks Leigh
Hi, It is my first post so apologies if I'll do anything not correct. We're using Mobi Control version 14.4.9.1034 and the query is for Samsung A02s, Samsung A12, Moto G6 and G8 devices enrolled as Android Enterprise. I'm after a post install script on File sync rule to enable 'Allow permission' function within Change system settings for certain application. We will need in near future to update this application every month or so. I have attached a screen shot to provide more details what I'm after. Please let me know if it is possible or if any further details I can provide. Kind regards, Norbert
Hi, By default, only the MobiControl Administrators group has Read and Write permissions on all profiles. Is there a simple way to give MobiControl Technicians group Read and Write permission without editing all 100+ profiles we have? We run a version 14.4.9.1034 Thank you for the tips!
Top-tier experts who are delivering outstanding content. Should have more than 7000 points.
Experts who are consistent with great content. Should have more than 1000 points.
Highly experienced members with valuable inputs. Should have more than 700 points.
Beginners taking the initiative. Should have more than 500 points.
New contributors starting their journey. Should have more than 250 points.