# Company-owned devices for work use only

<div id="bkmrk-full-device-manageme">**Full device management** is suitable for company-owned devices intended exclusively for work purposes. Enterprises can manage all apps on the device and can enforce the full spectrum of Android Management API's policies and commands.</div><div id="bkmrk-"></div><div id="bkmrk-it%27s-also-possible-t">It's also possible to lock a device down (via policy) to a single app or small set of apps to serve a dedicated purpose or use case. This subset of fully managed devices is referred to as **dedicated devices**.</div><div id="bkmrk--0"></div><div id="bkmrk-to-set-up-full-manag">To set up full management on a company-owned device, use one of the following provisioning methods (ensure that the [enrollment token](https://enterprise.cerberusapp.com/docs/books/user-manual/page/enrollment-tokens "Enrollment tokens") has **Personal usage** set to **Disallowed**):</div><div id="bkmrk--1"></div>#### QR code method

<table id="bkmrk-android-version-work" style="width: 161px;"><colgroup><col width="“25%”"></col><col width="“25%”"></col><col width="25%"></col><col width="25%"></col></colgroup><tbody><tr><td style="width: 161px;"><span style="text-align: center; display: block;">Android version</span></td></tr><tr><td style="width: 161px;"><span style="text-align: center; display: block;"><small>7.0+</small></span></td></tr></tbody></table>

<div id="bkmrk-on-a-new-or-factory-">On a new or factory-reset device, the user (typically an IT admin) taps the screen six times in the same spot. This triggers the device to prompt the user to scan a QR code.</div><div id="bkmrk--2"></div>#### DPC identifier method

<table id="bkmrk-android-version-5.1%2B" style="width: 161px;"><colgroup><col width="“25%”"></col><col width="“25%”"></col><col width="25%"></col><col width="25%"></col></colgroup><tbody><tr><td style="width: 161px;"><span style="text-align: center; display: block;">Android version</span></td></tr><tr><td style="width: 161px;"><span style="text-align: center; display: block;"><small>5.1+</small></span></td></tr></tbody></table>

<div id="bkmrk-if-android-device-po"><div>If Android Device Policy can't be added via QR code a user or IT admin can follow these steps to provision a fully managed or dedicated device:</div>  
<div>1. Follow the setup wizard on a new or factory-reset device.</div><div>2. Enter Wi-Fi login details to connect the device to the internet.</div><div>3. When prompted to sign in, enter **afw#setup**, which downloads Android Device Policy.</div><div>4. Scan a QR code or manually enter an enrollment token to provision the device.</div></div>