App Management


With organizations moving to an extensively mobile-only workforce, corporate apps now act as the nucleus to such organizations. It becomes the foremost task of the IT admins to ensure all the requisite corporate apps are present on the device and are running the latest version, by constantly updating them. MDM MSP lets you take complete control of app management - installation, deletion, update and license management. You can manage both Store apps as well as Enerprise apps over-the-air(OTA), using MDM MSP.

App Installation Workflow

The first step towards app management in MDM MSP, is to build an App Repository. As the name suggests, App Repository contains both Store and enterprise app, to be distributed to the devices. Once done, the apps are ready for distribution. Once distributed, app installation is initiated through the Store, in case of Store app and in case of enterprise apps, the device contacts MDM MSP to initiate installtion. Once the installation is initiated, the installation status is updated in near-real time on MDM MSP. App updates is similar to app installation, while app deletion is even simpler. Know more app deletion from devices here and from groups here. Another easier alternative to removal of apps is moving apps to Trash. You can understand app installation in MDM MSP using the flow diagram given below.

You can add Android apps in bulk to App Repository, as explained here and iOS apps in bulk, as explained here. You can also install Android apps silently without any user intervention as explained here. Silent installation of iOS apps can be done as explained here. In case you distribute Android apps to the App Catalog instead of silently installing them, the device user can uninstall the distributed apps, which is by default restricted in case of silent installation.

Installation-based App Management

Managing apps is more complex, since overwhelming number of apps are discovered in the enterprise everyday. You will have to manage all the apps, which is quite a challenging task. You can simplify app management by grouping apps based on installation type. You can choose the type of apps, which needs to be managed from here : Mobile Device Manager Console -> Inventory -> Apps -> Settings ->Type of Apps to be managed. You can choose to ignore the apps that are pre-installed in the device and the apps that are distributed through MDM MSP. By ignoring these two types of apps, you will be able to focus on the apps that are installed by the users. Only the apps that you have chosen will be displayed on the views of the Mobile Device Manager console, expect for blacklisted views.

Even if you ignore to manage pre-installed apps, it will still be displayed, if any such app has been blacklisted. For example: You have blacklisted the app "twitter", this app has been discovered on few devices as pre-installed app, then this app will be listed on all blacklisted views.

Managing app updates

Managing apps not only involves distributing the apps to devices, it also includes ensuring the apps remain up to date with all the required updates installed. Mobile Device Manager Plus MSP allows admin to manage these app updates from a single view.

To view the list of apps

  1. Under Device Mgmt, click on App Repository.
  2. All the apps that were added to the repository, will be listed out in this view.
  3. Click on the App name to view more granular details about the app. It includes details like app version, the devices with the apps, details about the app updates and license details.
  4. In addition to these details, we can also view the deployment status of the app to devices by clicking on App Distribution Status.

NOTE: The app updates are synced from the Store every 24 hours or when the apps are synced manually from ABM. If you are unable to find the app update, manually sync the apps by clicking on Sync VPP Apps from the App Repository.

Updating apps for all groups and devices

Keeping the apps up to date can be a tedious task since the administrator needs to ensure that the available updates are compliant with the organization's policies and all the critical updates are completed on the devices.

MDM MSP server contacts the store everyday to check if new updates for apps have been released. If a new update is available, it will be notified on the MDM MSP server as well. In the case of enterpriseĀ apps, the apps have to be updated by the admin on the MDM MSP server.

The admin can also prevent the users from manually updating the apps on devices by ensuring the following:

  1. The apps are purchased from the Apple Business Manager Portal.
  2. The apps should be distributed to the devices with the option 'without Apple ID' option enabled.

Follow the steps given below to distribute app updates to all devices which have the previous version of the app:

  1. Click the App name under the App Repository tab.
  2. Once an update is available for the app, an Update All button will appear below Yet to Update Apps.
  3. Click on the button to distribute the update to all the devices.
  4. Enable the checkbox Add to App Catalog if you want to user to install the update from the App Catalog.
  5. If you want to silently complete the app installation, enable Install Updates Immediately .
  6. Click on Update App to complete the app update.

Distributing updates to particular groups/devices

Some app updates need to be distributed only to a few devices in the organization. Follow the steps given below to distribute the updates to selected Groups/ Devices

  1. Under Device Mgmt, click on Groups & Devices.
  2. Click on the Groups or Devices tab.
  3. Select the required Group or Device name.
  4. It will list out all the apps which are available for the Group/Device.
  5. Select the app to be updated and click on Update App.

Moving apps to Trash

When you want to delete app(s) associated with devices/groups, you can simply move the apps to Trash. Moving apps to Trash, ensures the apps are automatically disassociated from the devices/groups, instead of doing it manually. These apps are automatically deleted after 90 days. The apps can also be deleted permanently or restored manually from Trash by the user. However, the restored apps don't get automatically distributed to the previously associated groups/devices and need to be distributed again.

Follow the steps given below to move apps to Trash:

  1. On the MDM MSP server, navigate to Device Mgmt and select App Repository, from the left pane.

  2. You can view the list of apps added to the App Repository.

  3. Select the apps to be moved to Trash
  4. Click on the Move to Trash button and the apps are moved to Trash.

The apps can be viewed by clicking on . The profiles can be deleted or restored from there.

1.Moving Kiosk-provisioned apps to Trash, results in the removal of the associated Kiosk profile from the devices. Assuming you move Zoho Mail to Trash, any Kiosk profile containing this app as a Kiosk-provisioned app, will have the Kiosk policy automatically disassociated from the devices.

2. If you have moved bulk purchased apps to Trash, it is recommended to remove it from the account as well. This feature is not supported in Apple VPP but supported in Play for Work.

3. Any apps moved to Trash, will not be automatically added back to the App Repository, on subsequent app syncing. App syncing is done only for those apps present in the App Repository.

Copyright © 2019, ZOHO Corp. All Rights Reserved.