We have procured the tablets samsung MDM supporting T3100 series devicefor sales ( they work at office also on road) for using the CRM where tablet is enabled with wifi and also GSM network but now the major concern is security measure.
1.How to restrict the sales user work uses tablet not to install any app or software since GSM network is enabled for data services
2.How to restrict the sales user not having administrator privileges so that installation is not possible, similarly deny access to the unwanted apps and deny camera access.
3. allow access only to the CRM as the CRM is webbased and also app available and block all the rest of the accesss.
4. How centrally manage all the tablets if any installl it should be only from IT