Overview: Manage devices with Google endpoint management

Basic mobile security

Basic mobile management is on by default and provides core security like hijacking protection. Your users don't need to install a device management app with this option.

Setup: Automatically applied, no user setup required

Management options:

• Set password requirements for managed mobile devices
• Wipe a user's account from a mobile device
• Manage apps for Android devices
• Review included features

Learn more about basic management

Advanced mobile security and app management

Use advanced mobile management if you need more control over your organization's data. You can require stronger passwords, wipe devices remotely, manage iOS apps, use Android work profiles, and more.

Setup: Turn on for all or select mobile device platforms and organizational units, users must install a management app on their devices

Management options:

• All basic mobile management options
• Require admin approval for mobile devices
• Wipe a mobile device
• Recommend and manage iOS apps
• Review included features

Set up advanced management

Computer security

You can control which laptops, desktops, and other endpoints can access your organization's data and get details about those devices. You can block devices, sign out users remotely, and use Context Aware Access.

Manage computers

Company-owned device management

You can manage all your company-owned devices—mobile devices, laptops, desktops—in one place in your Google Workspace Admin console.

Learn how to source, enroll, and manage these company assets for all platforms and device types.

Set up company-owned devices