- Select under Control Panel→ Devices in the management console a device (left arrow in illus.) and then click on Lock Workspace (right arrow in illus.).
All apps relevant for Android Enterprise will then be blocked (see illus.).
Note! If devices do not pass the SafetyNet check by Google, they can be unlocked here for a short time with Unlock Workspace (left arrow in picture). As long as the reason for the lock is not removed on the devices, the lock will be repeated after about 10 minutes. The devices will be locked in case of a failure, if either in the Global Settings or via Policy under Basic Integrity failure action/CTS Profile Match failure action the option Lock is selected.