Google is deprecating device admin in favour of Android enterprise

Originally published at: https://bayton.org/2017/12/google-is-deprecating-device-admin-in-favour-of-android-enterprise/

On Tuesday, Google finally announced their intention to deprecate the Android device administration APIs – which have enabled enterprise device management since Android 2.2 Froyo in 2010 – in order to promote Android enterprise (or work profile and managed device APIs as Google refer to them) as the default and only management APIs for Android devices from 2019. In their announcement, Google state device admin will remain supported in Oreo now and through the next major release, Android P. One rather important caveat in Android P however is passcode enforcement will be deprecated ahead of being removed entirely in Android Q. Once Android Q is announced, Android enterprise will be the only available solution for device management going forward. This has been a long time coming. As both an active proponent of Android enterprise and someone who’s seen device administrator capabilities abused by applications over the years, this is a really exciting announcement; it reinforces and validates the long-held opinion I’ve had that Android enterprise is the future of Android device management and will no doubt help to further improve the security of the Android platform. What does that mean for organisations? It depends to a degree, but it will sooner or later require a change in the way devices are managed. There’s a good chance many of the devices under management today won’t see an update to Android Q, since OEM’s typically provide only 18 months of support for updates. With Oreo being installed on only 0.5% of all…