M Android MDM by tzlus

Control for a phone or tablet you hand to someone else.

Android MDM takes over the device as its owner. You decide which apps run, what reaches the internet, and which features stay off, then manage every device from one dashboard. The person using the phone keeps a phone that works.

Install on a device See every control

Every control, and the switch you get for it.

Each group below ends with the actual control as it appears in the dashboard and on the device. Switch on means blocked.

Apps

  • Disable or suspend any app, or uninstall it, from the dashboard or on the device.
  • Close on open: an app stays installed and working in the background, but shuts the moment it's opened.
  • Block sideloading so APK files can't be installed by the user.
  • Play Store three ways: suspend it, cut only its internet (keeps banking apps happy), or close it on open.
  • Push an app: install from a link or upload an APK straight from the dashboard.
On the device
Block Play Storeclose when opened

Internet and browsing

  • Block all internet, with exceptions for the apps that need it.
  • Cut one app's internet while leaving it installed and enabled.
  • Block in-app browsers, per app or everywhere, so no app becomes a back door to the web.
  • Lock private DNS to your filtering resolver.
On the device
Block in-app browsers

Messaging and AI

  • Gemini and Google AI kept off, and kept off if the user tries to turn it back on.
  • RCS chat in Google Messages disabled.
  • Gmail Chat and Meet tabs blocked.
On the device
Block Gemini / Google AI

Device hardening

  • Developer options and USB debugging blocked, separately.
  • Safe mode, USB file transfer, camera, screenshots each switchable.
  • Accounts, extra users and guest locked so nothing runs outside the policy.
  • Wi-Fi and mobile changes, hotspot, airplane mode, Bluetooth under your control.
  • Screen lock reset remotely; kiosk mode when a device should run one app.
On the device
Block USB debugging (ADB)

Updates

  • The MDM updates itself: silently in the background, or by asking first, your choice per release, with release notes the user can read.
  • The user updates their own apps from Google Play with their own account, no PIN needed.
  • You set the source for any app (a specific APK link) or freeze an app so it never updates.
In the dashboard
Notify users a new update is available

Support and visibility

  • Built-in support chat between you and the user, with delivered and read receipts, reachable without the PIN.
  • Every device at a glance: model, app version, battery, installed apps, and its location when you ask for it.
  • An audit log of everything: each switch, each install, each update, with the result the device reported back.
  • Sync you control: from every few seconds to once a week, or push-only for the longest battery life.
In the dashboard
Sync with serverOff, push only

How it holds, and what it leaves alone.

How it holds

The app is installed as the device's owner, the strongest level Android offers. Blocks are enforced by the system, not by a filter that can be closed. Where Android only exposes a feature as an in-app switch (Gemini, Gmail's tabs, in-app browsers), an enforcement service turns it back off the moment it's touched.

Factory reset stays available on purpose, so a device that ever gets stuck can always be recovered, and a freed license lets it be enrolled again with the same key.

What it leaves alone

It does not read messages, emails, or browsing. Location is taken only when you press Locate, and the device's location settings are put back exactly as they were afterwards.

Nothing happens silently to the admin either: every action, from either side, is written to the audit log with its outcome.

Ready when the device is.

Installing takes a computer with Chrome and a USB cable. Plug the phone in, open the installer, and follow it; it checks the device, sets everything up, and tells you which accounts it found. You'll need a license key from tzlus.

Open the installer Admin sign in