Approve, block, unblock, or delete a managed device (2024)

To manage the devices you use for work or school, go here instead.

Supported editions for these features (except as noted): Frontline Starter and Frontline Standard; Business Starter, Business Standard, and Business Plus; Enterprise Standard and Enterprise Plus;Education Fundamentals, Education Standard, Teaching and Learning Upgrade, Education Plus, and Endpoint Education Upgrade; Essentials, Enterprise Essentials, and Enterprise Essentials Plus; GSuite Basic and GSuite Business;Cloud Identity Free and Cloud Identity Premium. Compareyouredition

As an administrator, you can control which devices users can access work data from by approving, blocking, or deleting a device in the Admin console. The actions available for a device and what the action does depends on the type of device (mobile or endpoint) and the type of management.

Default device states and management options

Note:Deleting a device from the devices listdoesn't remove work data (except for iOS). To remove all work data from a device, you can wipe the account from the device or wipe the entire device.

Jump to instructions

• Approve
• Block
• Unblock
• Delete

Approve a device

Not supported for mobile devices under basic mobile management or endpoints under fundamental management or GCPW

When you approve a device, the device is allowed to sync Google data, with the following exceptions:

These instructions are for how to manually approve devices. If your edition supports it, you can set up a rule to automatically approve devices.

1. Sign in to your GoogleAdminconsole.

   Sign in using your administrator account (does not end in @gmail.com).

2. In the Admin console, go to MenuDevicesMobile & endpointsDevice approvals.

3. Review the list of devices that requested access to corporate data.

4. Choose an option:
   • To allow devices to access work data and to tag endpoint verification devices as approved, select the devices and click MoreApprove Devices.
   • To prevent devices from accessing work data and to tag endpoint verification devices as blocked, select the devices and click Block Device.

Block a device

Not available for endpoints under fundamental management or GCPW

When you block a device, the device is prevented from syncing Google data, with the following exceptions:

These instructions are for how to manually block devices. If your edition supports it, you can set up a rule to automatically block devices.

1. Sign in to your GoogleAdminconsole.

   Sign in using your administrator account (does not end in @gmail.com).

2. In the Admin console, go to MenuDevicesMobile & endpointsDevices.

3. Point to the device in the list and click Block Device.
4. ClickChange.

Changes can take up to 24 hours but typically happen more quickly.Learn more

Blocked devices stay in your devices list until you delete them. You might see a message that a device can’t be blocked. For details, click the message. To try to block the device again, click Retry.

Unblock a device

Not available for endpoints under fundamental management or GCPW

Unblock is available for devices that were blocked by an admin or automatically by a security rule. Unblock has the same behavior as Approve.

When a device is blocked, you can see how it was blocked (by an admin or rule) in the Admin console on the device’s details page. For details about when the device was blocked and which admin or rule blocked the device, review the device log events.

1. Sign in to your GoogleAdminconsole.

   Sign in using your administrator account (does not end in @gmail.com).

2. In the Admin console, go to MenuDevicesMobile & endpointsDevices.

3. Point to the device in the list and click Unblock Device. The device’s status changes from Blocked to Compliant or Non-compliant, depending on its compliance with your organization’s policies.

Delete a device

To temporarily stop syncing work data to a device, you can delete it from the Devices list. The device is removed from the devices list and, in most cases, the device can’t sync work data until the user signs in again.

Note: Deleting a device from the devices list doesn't remove work data. To remove all work data from a device, you can wipe the account from the device or wipe the entire device.

The user impact depends on the device platform and management type:

To delete a device from the Devices list:

1. Sign in to your GoogleAdminconsole.

   Sign in using your administrator account (does not end in @gmail.com).

2. In the Admin console, go to MenuDevicesMobile & endpointsDevices.

3. To delete one device, point to the device and click MoreDelete Device. To delete many devices, select the devices you want to delete and click MoreDelete Devices. Deleted devices are removed from the list of managed devices.

_{Google, Google Workspace, and related marks and logos are trademarks of Google LLC. All other company and product names are trademarks of the companieswith which they are associated.}