# How to manage applications in devices?

Last updated: July 24, 2026

Manage applications on enrolled devices by locking devices to required apps, preventing user-initiated installations and deletions, force-installing applications, and using Kiosk Mode to restrict device functionality to specific business apps.

## Description

Mobile Device Manager Plus allows admins to completely manage the applications present in devices. It allows us to:

- Lock devices to required applications
- Prevent users from installing apps to the devices
- Prevent users from uninstalling required apps
- Force install apps into the devices

## Steps

### Lock devices to particular apps

We can choose to lock the devices to either a single app or to predefined set of apps using Kiosk mode feature. The user will not have access to any other app in the device.

Follow the steps given below to enable Kiosk Mode in devices:

1. Under **Device Mgmt** select **Profiles**.
2. Choose the OS of the devices for which the profiles are applied to.
3. In the profile, choose **Kiosk Mode**.
4. Select if you want to lock the device to **single app** or **multiple app** and enter the name of the app.
5. Publish and distribute the profile to required devices.

### Prevent users from installing apps to devices

The admin can prevent the users from installing any new applications into the devices.

To enable this option a restriction needs to be applied. Follow the steps to enable this restriction:

1. Under **Device Mgmt** select **Profiles**.
2. Choose the OS of the devices for which the profiles are applied to.
3. Under **Restrictions**, select the **Applications** tab.
4. **Restrict** the option **User can install apps through App Store**.
5. Publish and distribute the profile to required devices.

### Prevent users from uninstalling required apps

Admin can restrict the users from removing the apps that are distributed by MDM and are essential for the organisation.

To enable this option a restriction needs to be applied. Follow the steps to enable this restriction:

1. Under **Device Mgmt** select **Profiles**.
2. Choose the OS of the devices for which the profiles are applied to.
3. Under **Restrictions**, select the **Applications** tab.
4. **Restrict** the option **Deleting apps**.
5. Publish and distribute the profile to required devices.

### Force install apps to devices

Admins can choose to silently install the required applications to the managed devices. This will ensure that no user interaction is required for the installation of the apps to the devices.

To enable silent installation of applications into iOS devices, refer [this](https://www.manageengine.com/mobile-device-management/how-to/silent-installation-ios-apps.html).

To enable silent installation of apps into Android devices, refer this.

## Frequently asked questions

### How do I lock a device to specific apps?

Use Kiosk Mode: under Device Mgmt > Profiles, choose the device OS, select Kiosk Mode in the profile, choose single app or multiple app and enter the app name, then publish and distribute the profile to the required devices.

### Can I stop users from installing their own apps?

Yes. In Device Mgmt > Profiles, choose the OS, open the Restrictions > Applications tab, restrict the option "User can install apps through App Store", then publish and distribute the profile.

### How do I prevent users from removing required business apps?

In Device Mgmt > Profiles, choose the OS, open the Restrictions > Applications tab, restrict the option "Deleting apps", then publish and distribute the profile.

### Can apps be installed on devices without user interaction?

Yes, admins can force install (silently install) required applications so no user interaction is needed; separate guidance is available for silent installation on iOS and Android apps.