NounDeskData protection
A handful of policy settings control the ways company information can leave a device: printing, memory cards, screenshots, USB cables and unofficial apps. They all live in the Security card of a security policy.
Who: all roles can view. Changing settings needs Owner or Admin.
The settings
| Setting | Options | What blocking does | Needs |
|---|---|---|---|
| Printing | Allowed, Blocked | Stops printing from every app on the device. | Android 9+ |
| SD cards and USB drives | Allowed, Blocked | The device won’t use memory cards or USB storage, so files can’t be copied onto them. | Android 5.0+, company-owned |
| Screenshots | Allowed, Blocked | Stops screenshots and screen recording. Notification details are also hidden on the lock screen. | Android 5.0+ |
| USB data transfer | Allowed, File transfer blocked, All data transfer blocked | File transfer blocked stops copying files to a computer over a cable. All data transfer blocked stops all USB data; the cable only charges. | Android 5.0+, company-owned. All data transfer blocked needs Android 12+; older devices block file transfer only. |
| Apps from outside Google Play | Blocked (recommended), Allowed | Employees can’t install apps from downloaded files or other app stores. | Android 5.0+ |
| Developer options | Blocked (recommended), Allowed | Hides Android’s developer settings, including USB debugging, which can be used to copy data off a device. | Android 5.0+, company-owned |
Turn on data protection
- Go to Security policies and open the policy.
- In the Security card, set each setting you want to block.
- Select Save draft, then Publish…. The preview lists every change. See Policy versions and publishing.
Devices pick up the change at their next check-in.
What each template does
| Setting | Standard Business | Maximum Security | Field Worker | Kiosk / Dedicated Device |
|---|---|---|---|---|
| Printing | Allowed | Blocked | Allowed | Allowed |
| SD cards and USB drives | Allowed | Blocked | Allowed | Blocked (by the kiosk’s shared-device settings) |
| Screenshots | Allowed | Blocked | Allowed | Blocked |
| USB data transfer | File transfer blocked | All data transfer blocked | Allowed | All data transfer blocked |
| Apps from outside Google Play | Blocked | Blocked | Blocked | Blocked |
| Developer options | Blocked | Blocked | Blocked | Blocked |
Maximum Security blocks them all. It’s meant for devices that handle sensitive information, such as customer records or payment details. It also blocks the camera, hotspots and Bluetooth file sharing, and requires a strong password. See the Policy settings reference for the full list.
Tips
- Screenshots and the camera are separate settings. Blocking screenshots doesn’t stop someone photographing the screen with another phone.
- File transfer blocked still lets the device charge and work with accessories. It’s a good everyday choice, and the Standard Business default.
- Blocking SD cards and USB drives on a device that already has a memory card means the card’s files can’t be opened on that device.
- To share documents with staff without sending them as attachments, use Company documents. Every open is recorded.
Not available yet: controls that separate work and personal data on personal phones, such as blocking copy and paste between a work profile and personal apps. These come with personal-phone (work profile) support, which NounDesk doesn’t offer yet. Today NounDesk manages company-owned devices only.