Location based configuration profile toggling
Location-based configuration profile toggling may be provided. Configuration profiles associated with user devices may be identified, determinations of whether the user devices are authorized to enable the configuration profiles on the user devices may be made based at least in part on location constraints, and the configuration profiles may be enabled on the user devices if the location constraints are satisfied.
1. A method for enforcing a compliance rule associated with an enterprise, comprising:
providing an agent application to a mobile computing device;
monitoring, by the agent application, a call by an application to an operating system;
determining, by the agent application, whether the call by the application invokes functionality associated with the compliance rule, the compliance rule requiring the mobile computing device to be in proximity of a second mobile computing device in order to invoke the functionality;
approving the call by the application when the mobile computing device is in the proximity of the second mobile computing device, and
blocking the call by the application when the mobile computing device is outside the proximity of the second mobile computing device.
2. The method of claim 1 , further comprising:
receiving the compliance rule by the agent application from a remote management system.
3. The method of claim 1 , wherein:
the functionality comprises a request to access an e-mail account associated with the enterprise; and
the compliance rule specifies that the e-mail account can be accessed during certain business hours.
4. The method of claim 1 , wherein the application comprises a web browser, and monitoring the call by the application comprises monitoring calls by the web browser to the operating system.
5. The method of claim 1 , further comprising:
disabling a business configuration profile associated with the compliance rule; and
ceasing monitoring the call by the application to the operating system.
6. The method of claim 1 , wherein the agent application monitors the call by the application to the operating system when a business configuration profile has been enabled on the mobile computing device.
7. A computer readable medium comprising instructions which, when executed by a processor, enforce a compliance rule associated with an enterprise by:
providing an agent application to a mobile computing device;
monitoring, by the agent application, a call by an application to an operating system;
determining, by the agent application, whether the call by the application invokes functionality associated with the compliance rule, the compliance rule requiring the mobile computing device to be in proximity of a second mobile computing device in order to invoke the functionality;
approving the call by the application when the mobile computing device is in the proximity of the second mobile computing device, and
blocking the call by the application when the mobile computing device is outside the proximity of the second mobile computing device.
8. The computer readable medium of claim 7 , wherein a remote management system provides the compliance rule to the agent application.
9. The computer readable medium of claim 7 , wherein:
the functionality comprises a request to access an e-mail account associated with the enterprise; and
the compliance rule specifies that the e-mail account can be accessed during certain business hours.
10. The computer readable medium of claim 7 , wherein the application comprises a web browser, and monitoring the call by the application comprises monitoring calls by the web browser to the operating system.
11. The computer readable medium of claim 7 , wherein the instructions further:
disable a business configuration profile associated with the compliance rule; and
cease monitoring the call by the application to the operating system.
12. The computer readable medium of claim 7 , wherein the agent application monitors the call by the application to the operating system when a business configuration profile has been enabled on the mobile computing device.
13. A remote management system for enforcing a compliance rule associated with an enterprise, comprising:
a processor; and
a memory, the processor and the memory being configured to provide an agent application to a mobile computing device, the agent application being configured to:
monitor a call by an application to the operating system;
determine whether the call by the application invokes functionality associated with the compliance rule, the compliance rule requiring the mobile computing device to be in proximity of a second mobile computing device in order to invoke the functionality;
approve the call by the application when the mobile computing device is in the proximity of the second mobile computing device, and
blocking the call by the application when the mobile computing device is outside the proximity of the second mobile computing device.
14. The remote management system of claim 13 , wherein:
the functionality comprises a request to access an e-mail account associated with the enterprise; and
the compliance rule specifies that the e-mail account can be accessed during certain business hours.
15. The remote management system of claim 13 , wherein the application comprises a web browser, and monitoring the call by the application comprises monitoring calls by the web browser to the operating system.
16. The remote management system of claim 13 , wherein the agent application further:
disables a business configuration profile associated with the compliance rule; and
ceases monitoring the call by the application to the operating system.
17. The remote management system of claim 13 , wherein the agent application monitors the call by the application to the operating system when a business configuration profile has been enabled on the mobile computing device.