Allow com.android.vending package but prevent access to Google Play

Question

On our devices we needed to allow com.android.vending (Which is the package ID for Google Play Store) so that the user can install apps, otherwise the admin password dialog keeps appearing. 

The issue now is if the user closes the MDM app that they have enough time to find and open the Google Play Store and to use the app. We need to prevent the user from gaining access to this app.

Answer 1

This task could be solved by allowing certain activities from com.android.vending package.

Please do the following.

1. Turn on logging in your web panel

2. Open the configuration details, Applications tab, disable com.android.vending package (find it and set the action to "Block"), and save the configuration.

3. Perform the installation and wait until the black lock screen appears.

4. Open logs (Functions - Logs). You must get the following log message:

Blocked package by usage stats: com.android.settings.vending / *************

Instead of *************, you will see the activity class name which needs to be enabled.

5. Open the configuration details, "MDM settings" tab, and paste this activity class name in the "Allowed activities" field. Save the configuration to apply changes.

6. Repeat step 3. If you still get a black screen, there are more activities to be enabled; enable them in the same way (separate the class names in the "Allowed activities" field by commas).