Google Workspace Changes

New native Apple MDM settings for iOS devices are now generally available in Google Endpoint Management.

Google Endpoint Management has introduced an expanded set of native Apple Mobile Device Management (MDM) settings, providing administrators with more granular control over iOS device configurations and security. These new settings span several categories, including Apps and Services, Safari, Device Features, Backup & iCloud Sync, Authentication, and Data Sharing, enabling organizations to harden the security posture for both corporate-owned and BYOD iOS devices directly from the Google Workspace Admin console.

Improvements to local administrative access controls on Windows 10 and 11 devices.

Google is updating the administrative privileges setting for Windows device management to provide administrators with more control and flexibility over local administrative access on Windows 10 and 11 devices. This update replaces the previous 'Replace' behavior, which removed all existing members from the local administrators group before adding new ones, allowing organizations to preserve existing local admin access while managing specific users via Google Workspace.

Admins can now upload, manage, and distribute private iOS applications to advanced managed devices.

Google Endpoint Management now allows administrators to upload and distribute private, internally developed iOS applications to advanced managed devices via the Admin console. This feature enables the secure distribution of in-house apps for productivity or company-specific information, and ensures that apps are automatically updated on users' devices whenever a new version is uploaded by the admin.

Distribute digital certificates to iOS and Android devices via MDM for secure access.

Google is now allowing the issuance of digital certificates to iOS and Android devices for secure access to G Suite and other corporate resources, even when devices are not connected to the corporate network. This functionality is available to G Suite Enterprise, G Suite Enterprise for Education, and Cloud Identity Premium customers using Google Endpoint Management via an on-premises connector.