Recently active topics

I need someone willing to help me figure out what is going on with my devices I been hacked and pretty sure it's cause of emm

Hi,We manage Android 14 devices (Grandstream GXV3480, Android Enterprise work-managed, enrolled in Workspace ONE UEM) behind a Palo Alto firewall with a URL allowlist.In our firewall logs, one device repeatedly requests http://www.google.cn/generate_204 (and https://www.google.cn), about 76 times in 4 hours, and the firewall blocks every attempt. At the same time, the other connectivity probes pass: https://www.google.com/generate_204, connectivitycheck.gstatic.com, and play.googleapis.com/generate_204.Google's Android Enterprise Network Requirements lists connectivitycheck.android.com, connectivitycheck.gstatic.com and www.google.com/generate_204 for the connectivity check. It does not mention google.cn anywhere.Questions1. Is www.google.cn (or *.google.cn) required to be reachable for Android Enterprise management, Google Play, Android Device Policy, or Google Play Services to work correctly?2. If it is not required, can the block be left in place without affecting policy enforcement

Crostini: wl-copy, wl-paste, and xclip cannot access ChromeOS clipboard while GUI clipboard worksEnvironmentChromeOS with Crostini (Debian container) wl-clipboard 2.2.1 Sommelier running normally Linux GUI applications functionalDescriptionAfter a recent ChromeOS update, command-line clipboard tools no longer interact with the ChromeOS clipboard.The issue affects:wl-copy wl-paste xclipHowever, clipboard synchronization between Linux GUI applications and ChromeOS continues to work normally.For example:Copying text in Mousepad and pasting into Chrome succeeds. echo hello | wl-copy hangs indefinitely. wl-paste hangs indefinitely. echo hello | xclip -selection clipboard returns immediately but does not update the ChromeOS clipboard.This suggests that GUI clipboard integration remains functional while CLI clipboard mechanisms are broken.Expected Behavior   Shell1echo hello | wl-copyshould return immediately and place hello into the ChromeOS clipboard.   Shell1wl-pasteshould return clipboard

Hello everyone,I am developing a mobile application using React Native for Android, and I need to retrieve the device's IMEI number for device identification and management purposes.I understand that Android 10 and above restrict access to hardware identifiers such as IMEI and that normal applications cannot access them using the standard TelephonyManager APIs.However, I would like to understand whether this restriction can be addressed through Android Enterprise device management (MDM).My questions are: Device Owner / Fully Managed Devices: If our application is deployed on company-owned devices enrolled as fully managed devices through Android Enterprise, can it access the IMEI? Required Permissions: Is granting READ_PHONE_STATE sufficient for a properly configured Device Owner application, or are additional permissions or system-level privileges required? React Native Integration: Since the application is built using React Native, can we implement this functionality through a cu

Hi AE Folks,Our Entra account configured in Intune as the Managed Google Play linked account has been disabled due to ToS violations and the appeal unsuccessful. I need some help untying this knot: why was the account disabled, how can we get it re-instated, how can we add a backup account to avoid this single point of failure, and how can we avoid this problem in the future?I read that we should open a ticket with our EMM: the Intune specialist I spoke to wasn’t aware of a backline Google Enterprise Support channel. Is there a specific group where I should route the ticket?Any and all help would be most appreciated.--BP

Hi Team, Been banging my head against the wall for weeks trying to figure this out Does @Android have a hardware partnership program for manufacturers building Android XR audio glasses?Alternatively, can a manufacturer build audio-only smart glasses on AOSP and get Google’s approval for CDD compatibility and GMS licensing?Any pointers to the right team or documentation would be greatly appreciated! 

The Google Play tool does not appear on some Chromebooks in our organization.All settings are configured correctly in the OU. Some machines in the same OU receive the tool, while others do not.

We identified a reproducible issue affecting all users in our organization when using Gmail for Android with Exchange ActiveSync.EnvironmentGmail client: Android-Mail/2026.09.14.986636867.Release Android Enterprise Motorola Edge 50 Neo Motorola G71 Exchange Server Subscription Edition (latest updates) Ivanti EPMM 12.7.0.0 Ivanti Sentry 10.7.3Issue After device reboot or disable work profile:Existing Exchange contacts remain on device. Gmail starts a new ActiveSync contact synchronization. Another complete copy of the same contacts is created. Contact count continuously grows.Example:Initial sync: ~450 contactsAfter reboot #1: ~900 contactsAfter reboot #2: ~1350 contactsAfter reboot #3: ~1800 contacts Investigation resultsOutlook and Exchange mailbox do not contain duplicate contacts. Duplicates exist only on Android devices. Email and Calendar synchronization work correctly. Same DeviceId is used before and after reboot. Exchange returns HTTP 200 and successful ActiveSync responses. Ex

We have a shared account we use just for the enterprise app store. we are a microsoft company so it is not a "work" account in the traditional sense that its a gsuite email. I have it logged in on a spare tablet, and I set up Google Authenticator and my cell as backups. We do not have to access often as we only need to when we need to add approved apps to the store. We use on handheld scanners in the stores, skorpio x5s. I tried to access this week on my computer I have used in the past. Google is saying it does not recognize the device, then wants me to hit the code on skorpio x5. I have no clue which one as we have 14 in each of our 6 locations. I tried to access on the tablet again, does not recognize the device. It never once has asked me for texted code, or for the authenticator. I went to one location and checked all the skorpio x5s, and not a single one was logged into a google account. We do have it connected to our sureMDM account to allow for selecting the approved apps. How

We're experiencing an intermittent issue with Managed App Configuration on Android Enterprise devices and are looking to understand whether others have seen similar behaviour.Environment:Android Enterprise Dedicated/Fully Managed devices Honeywell devices (CT32 and EDA series) MDM: Hexnode Application: UKG Pro Mobile App configuration deployed via Managed App Configuration through Android EnterpriseIssue:From time to time, and without any obvious trigger, the UKG application appears to lose its managed configuration (tenant URL and related settings). Users are then unable to access the application as expected.What we've observed:The device remains enrolled and managed. The policy is still present within Hexnode. Other device management functions continue to work normally. Re-syncing the policy from Hexnode immediately restores the configuration and resolves the issue.The behaviour appears random, and we have not yet been able to identify a clear pattern related to device model, Android

Hi Google Workspace Community,I'm trying to set up Google Workspace for my UK-based creative and digital marketing business, Three Tapes.Our website is https://threetapes.co.uk, and we're attempting to create our professional business email address: hello@threetapes.co.uk.Initially, we encountered difficulties verifying ownership of our domain. However, when attempting to complete the registration, Google displayed the following error:"Sorry, we can't complete your sign-up."The message explains that Google's automated anti-spam prevention system sometimes rejects legitimate registrations.I want to clarify that: We are a genuine UK-based business. We own and control the domain threetapes.co.uk. We intend to use Google Workspace for legitimate business communication with our clients. We are happy to provide proof of domain ownership and any necessary business verification. Unfortunately, I haven't been able to find a way to contact Google Workspace support directly because our acco

Multiple Chromeboxes are fatally crashing and cannot be restored with Recovery after the last update.Units affected so far are the Asus Chromebox 3 TEEMO D7-A3B-B4Z-S5A-A92 and Acer Chromebox CXI3 D15Q1Stable beta, nothing will bring them back to live. Maybe for a short term but they auto update and die again. Stable even mentions that the mirror image is outdated. I just downloaded a minute ago.Why is Google allowing this?! It started last week.We have a few spare chromebooks and after that it is over. I am so done with this system. They just end production machines at will and do not seem to notice or care at all.Not more ChromeOS for me, I am out. This does not belong in a professional setting!!!!!!

Hello everyone,My name is Rafał Szymanowicz and I am based in Poland.My background combines finance transformation, SAP S/4HANA, AI solutions, and enterprise technology adoption. Recently, I have been exploring Chrome Enterprise, Android Enterprise, and modern endpoint management as part of my broader interest in AI-enabled workplaces.I look forward to learning from the community, contributing to discussions, and exchanging experiences around enterprise browser management, security, productivity, and digital transformation.Thank you for having me here.(**CM - updated to remove personal information)

We (the schools district I am employed by) want to block AI Mode and AI Overviews for students in our organization to prevent them from using the AI built into the Google Search Bar to cheat since they can just highlight a question “right-click” and click “search google” any question from their online school homework/quiz content, the AI Overview in the resulting tab will then provide them the answer. We have already implemented all the Enterprise policies related to GenAI and AI Mode and set them to disabled, here is a short list (for reference):GenAiDefaultSettings AIModeSettings DevToolsGenAiSettings GenAIInlineImageSettings GenAILocalFoundationalModelSettings HelpMeWriteSettings SearchContentSharingSettings SmartTabSharingSettings TabCompareSettings VoiceTypingSettings GoogleSearchSidePanelEnabled LensOverlaySettings (depreciated) LensRegionSearchEnabled (depreciated) DnsOverHttpsMode GeminiSettingsEven with all these policies in place to prevent students from accessing any GenAI f

Hello Google Support Team,we are experiencing an issue with our Sauter GmbH Managed Google Play environment and would appreciate your assistance.Organization DetailsOrganization Name: Sauter GmbH Managed Google Play Organization ID:  (**CM - updated to remove personal information) Issue DescriptionOur Managed Google Play organization is successfully connected to Microsoft Intune. The connector status is reported as successful and synchronization between Intune and Managed Google Play is working without errors. Existing approved applications remain visible and available within Intune. [learn.microsoft.com], [learn.microsoft.com]However, we are no longer able to approve new applications for our organization.SymptomsManaged Google Play connector status: Successful Synchronization status: Successful Previously approved applications are visible and functional New applications cannot be approved Accessing Welcome to the Android Enterprise and Chrome Customer Community | Community returns HTT

Hello everyone, we are in Education.We have a Google instance and an Intune instance.We have successfully managed Android devices in Intune, but they are not zero-touch.I understand we can leverage Google as the registrar, then push that device to Intune as the MDM?Is this possible?

Doe’s anyone know if it’s possible to allow “ask gemini” to do browser control I would love to have a feature where it would group my tabs or recommend removal of older tabs that have not been used for a while I am not sure if it’s just a me thing but working remotely I find my self in and out of meeting alot and then having a tab bar that looks something like this so would be great to have a feature that could help me with that but also have control of the page I am viewing to make automation just that much quicker.