SkieOSHow to lock down Android tablets for students
To lock down student tablets, use an allow list of approved apps, block the settings students use to escape (reset, safe mode, developer options, VPN), control the browser, and enforce it all with device-owner management so it cannot be switched off.
Start with an allow list, not a block list
A block list tries to name everything harmful, and new apps appear daily. An allow list names what students need and closes the rest. It is shorter, safer and easier to explain.
Block the ways out
- Factory reset and safe mode
- Developer options and USB debugging
- VPN, DNS and certificate changes
- Installing apps from unknown sources
- Adding other user accounts
Control the browser
Decide whether the browser is off, restricted or allowed per group. When it is allowed, enforce filtering and safe search so students cannot change them. See safe browsing for students.
Use schedules
A tablet need not behave the same all day. School hours, study blocks and night can each have their own allow list.
Enforce it below the apps
Settings enforced by an ordinary app can be undone. Device-owner enforcement is applied by Android itself. See Android device owner mode explained.
Frequently asked questions
Can students still use the camera?
That is a policy choice. The camera can be allowed or blocked per group.
What if a student installs an app anyway?
With enforcement in place, unapproved installs are blocked, and an app that gets through is removed.
Is a kiosk mode the same thing?
Kiosk mode locks a device to one or a few apps. A school allow list is similar but usually covers more apps.