Disallow account management

Disallow account management

An administrator of a WeGuard account may need to restrict users from adding or accessing personal Gmail accounts or any other unauthorized accounts on enterprise-enrolled devices.


If this restriction is not enabled, users may add their personal accounts to the device and potentially access or synchronize corporate data through unauthorized services. This can create a security risk and may allow users to bypass the organization’s security controls.


As demonstrated in this section of the video, without the required restriction, a user can add a personal Gmail account to a WeGuard-enrolled device. Therefore, administrators should ensure that only approved enterprise accounts can be added to managed devices.



Disallow the user from managing the account


  • Log in to the WeGuard  Console.

  • Navigate to Policies and Select the Policy Group.



  • Click on Security and find Disallow Account Management.



  • Give package ID (Eg. com.google.android.gm) and click Add Type.

  • Admin can get the package ID's for any application they want to block and add there.



  • Click on Pending Change, then click on Save & Confirm.



Notes
When user tried to login to the blocked application, it will show an error message stating the action is blocked.





We hope this article was helpful. For additional support:


    • Related Articles

    • Disallow App Installation

      An administrator of a WeGuard account may need to restrict users from adding personal Gmail accounts or other unauthorized accounts, as well as prevent them from installing unapproved applications on enterprise-enrolled devices. If these restrictions ...
    • Hide WeGuard App - Android Work Managed Policy

      Administrators may need to hide the WeGuard application from managed devices to prevent users from accessing the application directly while keeping device management active in the background. Hide WeGuard App in Work Managed Policy Log in to the ...
    • Finding the Package ID (APK ID) and Enabling a System Application

      System applications are pre-installed applications that are available on the device by default. WeGuard allows administrators to add these applications to a policy so they can be managed and made available on enrolled devices. To manually add a ...
    • Disabling Applications - Android

      The ability to disable applications is essential for efficiently managing and securing mobile devices within an organization. WeGuard can disable specific apps and enhance security by preventing access to potential risks or sensitive information, a ...
    • Configuring Factory Reset Protection (FRP) in WeGuard

      Factory Reset Protection (FRP) is a vital security layer designed to prevent unauthorized use of a device after a factory data reset. If a managed device is lost, stolen, or reset without authorization, FRP ensures the device remains "locked." It can ...