SkieSkie for Enterprise
Hardening and tamper protection, page 2
Every protection Skie applies to a managed device, and what each one stops. 72 questions answered.
- Why does Skie lock default apps on managed devices?Default apps decide which app opens links, handles SMS, dials calls or acts as the home screen. Skie locks them with Android's default apps restriction, on by default. A student cannot swap...
- Why does Skie block installing certificates on managed devices?A user-installed certificate can let someone intercept or reroute encrypted traffic, or help a bypass tool pass as trusted. Skie blocks installing certificates and credentials with...
- How does Skie block uninstalling apps on managed devices?Skie blocks uninstalling apps with Android's uninstall restriction, and it is on by default. A student cannot remove the apps a school has put on the tablet, which keeps learning apps in...
- Does Skie block hotspot and tethering on school devices?Yes. Skie blocks hotspot and tethering with Android's tethering restriction, and it is on by default. A student cannot share the tablet's connection with another device, and cannot reach...
- When should I lock Wi-Fi settings in Skie?Lock Wi-Fi settings when your devices should only ever join networks you provide. It is an optional protection that uses Android's configure Wi-Fi restriction, and it is off by default....
- When should I block SD cards and external storage on managed tablets?Block SD cards and external storage when you do not want files moving in or out on removable media. It is an optional Skie protection using Android's physical media restriction, and it is...
- When should I turn off cloud backup on managed devices?Turn off cloud backup when you do not want school device data copied to a personal cloud account. It is an optional Skie protection using Android's backup service control, and it is off by...
- When should I disable USB data entirely on managed tablets?Disable USB data when a tablet should charge and nothing else. It is an optional Skie protection for devices on Android 14 and newer, using Android's USB data signalling control, and it is...
- How do I block all app installs with Skie?Switch on the block all app installs protection. It is optional and off by default, and it uses Android's install apps restriction so that nothing new can be installed, even from Google...
- Can Skie disable the camera on school tablets?Yes. Disabling the camera is an optional Skie protection using Android's camera disable policy, and it is off by default. When it is on, camera apps cannot use the camera at all. Turn it on...
- Can Skie disable Bluetooth on managed devices?Yes. Disabling Bluetooth is an optional Skie protection using Android's Bluetooth restriction, and it is off by default. Students cannot switch it on, so file sharing and pairing with...
- How does Skie stop file transfer over USB on managed tablets?Skie blocks USB file transfer with Android's USB file transfer restriction, and it is on by default. Plugging a managed tablet into a computer will not expose its storage as a drive. The...
- Can Skie disable screenshots on student tablets?Yes. Disabling screenshots is an optional Skie protection using Android's screen capture policy, and it is off by default. When it is on, screenshots and screen recordings are blocked on...
- Can Skie disable SMS on managed phones?Yes. Disabling SMS is an optional Skie protection using Android's SMS restriction, and it is off by default. When it is on, the device cannot send or receive text messages. It suits tablets...
- Can Skie disable outgoing calls on managed devices?Yes. Disabling outgoing calls is an optional Skie protection using Android's outgoing calls restriction, and it is off by default. The device can no longer place calls. Emergency calls are...
- Can Skie turn off NFC on managed devices?Yes. Turning off NFC is an optional Skie protection using an Android restriction on the near-field radio, and it is off by default. It stops tap-to-share and tap-to-pay style features. Use...
- Can Skie turn off Wi-Fi Direct on managed devices?Yes. Turning off Wi-Fi Direct is an optional Skie protection using Android's Wi-Fi Direct restriction, and it is off by default. It stops a tablet connecting straight to another device...
- Can students change the wallpaper on managed tablets?Not if you turn on the lock wallpaper protection. It is optional and off by default, and it uses Android's set wallpaper restriction. The home and lock screen picture stay as set. It suits...
- Can a clever student get around Skie on a school device?Skie is built to be tamper-proof, with rules enforced by Android itself as the device owner and many routes closed at once. If anything ever did get through, the admin is alerted...
- What should we do if a student finds a way around a rule?Report it to Skie support with the device, the steps and the date. The team looks into it and ships a fix as an update, which reaches every device, not just yours. Meanwhile the breach...
- Can a student turn off the web filter on a Skie device?No. The filter is the device's Private DNS, set by the device owner, and the Private DNS setting is blocked. If a change were somehow made, Skie re-applies the protection, and the...
- Can an app use its own DNS over HTTPS to bypass the filter?Only allowed apps run on a managed device, and Chrome's secure DNS is turned off, so the main routes are closed. Alternative browsers, VPN apps and DNS changer apps are never allowed, and...
- Can a student download and install an APK from a website?No. Unknown sources are blocked on managed devices, so Android will not install an app from a downloaded file. All apps must come from Google Play, and the install guard removes anything...
- Can a student sideload an app from a computer over USB?No. Developer options and adb are blocked on managed devices, so a computer cannot push an app over USB debugging. USB file transfer is off by default, and USB data can be disabled entirely...
- Can a keyboard or accessibility app be used to override device controls?No. Third-party accessibility apps are blocked, and keyboards and default apps are locked, so a student cannot install a helper that overrides settings. Changes to protections are reverted....
- What happens if a student switches the device off or takes out the SIM?The rules keep working, because they are cached on the device and do not need the network. Location pauses until the device reconnects, the dashboard shows the last time it was seen, and an...
- Can a student remove Skie from the device admin list?No. Skie is the device owner, not an ordinary admin app, and it cannot be switched off from Settings. Only an admin can release it, using Remove Skie from the dashboard, which turns off...
- What happens if someone factory resets a managed device from the recovery menu?Android's Factory Reset Protection is on, so a wiped device asks for the Skie organisation's Google sign-in before it can be set up again. Only Skie holds that sign-in, so a reset device is...
- What is the install guard and what does it remove?The install guard watches for apps installed after enrolment. If an app is not allowed for that device's group, it is removed silently. Apps present at setup are recorded in a baseline...
- What is the baseline snapshot taken when a device is set up?The baseline snapshot is a record of the apps present on a device at setup. Skie uses it so the install guard never removes an app that was already there, such as a manufacturer or system...