Purpose
To manage and restrict Wi-Fi configuration on Android devices using the Wi-Fi Configuration Control setting in an Android Management API profile. This helps control user access to Wi-Fi networks and ensures secure connectivity.
Prerequisites
- Access to the SureMDM console
- Console enrolled in AMAPI
- Android devices enrolled using Android Management API
- Permission to create or edit profiles
Steps
- Log in to the SureMDM console.
- Navigate to Profiles → Android → New Profile → Android Management API → Primary Profile
- Enter the Profile Name and click on System Settings → Network
- In that , Wi-Fi Configuration Control, From the dropdown, select one of the following options:
- Unspecified (The device follows default OS behavior (typically allows Wi-Fi configuration).
- Allow (No restrictions; users can configure and connect to any Wi-Fi network).
- Limited Control (Switch Only) (Users can switch between existing networks but cannot add new Wi-Fi networks).
- Disallow (Users cannot configure Wi-Fi)
5. Save
Behavior based on selection:
- If we select Unspecified, Allow, or Limited Control (Switch Only) → Click Save and the profile will get saved.
- If we select Disallow, a prompt appears: “Ensure at least one Wi-Fi configuration is applied to the device to prevent loss of connectivity.” -> Click OK.
Next, check the CheckBox – Enable AllowList Network and In the Allowed SSIDs column, add the required Wi-Fi network names (SSIDs). -> Click Save and the profile will get saved.
Note – On Fully Managed devices, only Wi-Fi networks provisioned via SureMDM will work. On WPCO devices, users may manage personal Wi-Fi (non-work) if allowed by policy, but cannot configure work Wi-Fi.
Expected Results
- Wi-Fi configuration behavior is enforced based on the selected option.
- When Disallow is configured with AllowList, devices can connect only to specified SSIDs.
- The profile is saved successfully and applied to target devices.
Conclusion
Using Wi-Fi Configuration Control, administrators can restrict or allow Wi-Fi access based on organizational needs. When using the Disallow option, it is critical to configure allowed SSIDs to prevent connectivity issues on managed devices.
Need more help? Here’s how to get help from our experts.