Unified enterprise management of wireless devices in a controlled environment

A wireless device in a controlled environment, comprising:

• a computer processor;
• a non-transitory computer-readable storage device with computer-executable instructions stored thereon that, when executed by the computer processor, causes the computer processor to perform operations comprising:
• receiving a client control subsystem and configuration information from an enterprise management server associated with the controlled environment;
• installing the client control subsystem on the wireless device, wherein the wireless device is associated with a profile;
• creating, by the client control subsystem, a locked container, an unlocked container, and a limited access container in a plurality of containers based on the configuration information;
• transmitting a request to retrieve a file from the enterprise management server;
• receiving the file from the enterprise management server;
• storing, based on the profile, the file in a container, wherein the container is one of the locked container, the unlocked container, and the limited access container;
• retrieving an execution rule, wherein the execution rule is associated with one of the locked container, the unlocked container, or the limited access container;
• and
• executing the file based on the profile and the execution rule.

A non-transitory computer-readable medium having instructions stored therein, which when executed by a processor in a wireless device, cause the processor to perform operations, the operations comprising:

• receiving a client control subsystem and configuration information from an enterprise management server associated with a controlled environment;
• installing the client control subsystem on the wireless device, wherein the wireless device is associated with a profile;
• creating, by the client control subsystem, a locked container, an unlocked container, and a limited access container in a plurality of containers based on the configuration information, wherein the locked container includes a first set of files, the unlocked container includes a second set of files, and the limited access container includes a third set of files;
• receiving a request to execute a file located on the wireless device;
• determining whether the file is included in one of the first set of files, the second set of files, or the third set of files;
• based on the determining, retrieving an execution rule, wherein the execution rule is associated with one of the locked container, the unlocked container, or the limited access container;
• and
• executing the file based on the profile and the execution rule.