One of the FAQs I run into all the time is how to get Workspace ONE Intelligent HUB locked down to prevent user from getting it uninstalled.
Before we get into the the configuration steps, l would like to point out that getting rid of Intelligent HUB does not necessary getting a device un-enrolled. A device is only un-enrolled when a MDM profile is removed.
It is possible to setup a compliance rule to filter out devices with no Intelligent HUB installed. We can take appropriate remediation action accordingly.
Locking down Intelligent HUB is different from platform to platform and here are the the configuration steps to get Intelligent HUB locked down on iOS, MacOS, Android and Windows respectively.
iOS
The control can be found from App assignment.
MacOS
The control can be found from intelligent HUB settings.
Android
We can mark Intelligent HUB as a required app and send down a restriction profile to lock intelligent HUB down on Android.
Windows
There is not a setting for Windows. We will need to do it by manipulating the registry.
Please read this thread. I recommend you to read the whole thread before doing it. People were enhancing the solution throughout the thread so it is a good idea to read through them and choose the most suitable way for your environment.
Another approach is hide it from control panel to make it not visible to uninstall. Here is a powershell to do the hiding.
Σχόλια