Recently active topics

Our students have discovered that if you use the split tab feature in Google Chrome, it hides some tabs from teachers monitoring via classroom management tools. There is no way to configure the split tab view feature in the Admin Console. School districts need the ability to control or disable the new split tab feature. Every time Google makes a new feature available to Workspace users, they need to make it configurable by the administrator.

Hey everyone,Just a quick heads-up that I'll be out of office from 5th October and back on 12th October. I'm spending the week in a renovated church with a couple of friends recording music. Apparently the acoustics are incredible, so I'm hoping the building does most of the heavy lifting.Honestly, the space looks amazing, here’s a peek: While I'm away, the community is in very safe hands. ​@Rafa from the ChromeOS and Chrome Enterprise side will be keeping an eye on things, and ​@Lizzie will be around if anything needs her attention.Any posts or messages will be picked up as soon as I'm back.Cheers,Kirk

Our corporate domain is locked by an unknown legacy Android Enterprise binding, and we need to free it to link to Microsoft Intune. We are unable to register and setup a managed google playstore binding in our new intune instance that we are now starting to leverage, as our company domain (bmc.com) is already in use. We know it was a previous IT employee who created the binding, but we have no way to break it / reregister with a new bmc email address (current one ends with .gmail). We found a support article that lead us here to “submit a support request”, but that does not appear to be an option, only posting discussions. Any assistance is greatly appreciated. 

Since 19 Sep 2026, QR (6-tap) provisioning of Test DPC on a factory-reset device fails. After "Getting ready for work", Play Protect shows "App blocked to protect your device - Test DPC" with only an OK button, so provisioning cannot continue. The same flow worked before that date and nothing changed on our side.Setup: provisioning QR with PROVISIONING_DEVICE_ADMIN_COMPONENT_NAME com.afwsamples.testdpc/com.afwsamples.testdpc.DeviceAdminReceiver, an HTTPS download location for the APK, and the signature checksum.APK: com.afwsamples.testdpc 9.0.12 (versionCode 9012), unmodified, signed by CN=testdpc, O=Google Inc. Signing certificate SHA-256: 8090f6630b4e8962479123249087cb4658feaae36a1b57dbeafd74d109b333dc. File SHA-256: aad38c1f608b1c7289405c4e866977f5d231502643ce2e2401a7c305808f9c00 (on VirusTotal, 1/67, a generic AdLibrary heuristic).I found the approved-DPC allowlist page (https://support.google.com/work/android/answer/16694822) and other threads about custom DPCs being blocked, but

Hi all,We manage fully managed Android devices (company-owned) used as POS/KDS terminals in retail stores, via an EMM that uses the Android Management API.Our requirement: app auto-updates (especially Android System WebView, com.google.android.webview) must not happen during store business hours, because a WebView update restarts our WebView-based app and can interrupt operations.The AMAPI reference for systemUpdate says:"If the update type is WINDOWED, the update window will automatically apply to Play app updates as well."Questions:If we set systemUpdate to WINDOWED (e.g., 02:00–05:00), will Google Play auto-updates of Android System WebView also be restricted to that window? Are there any conditions or exceptions (e.g., Android version, Play Store version, high-priority/security updates, autoUpdateMode settings) where apps are updated outside the window? Is there any other recommended way to prevent WebView auto-updates during specific hours on fully managed devices?Reference: https

I keep getting this error while trying to register, I had ae-community@google.com, but I got a reply saying “Thank you for your interest. Unfortunately, we don't provide specific feedback or details regarding application decisions.”.  I need guidance as to what the next steps are? Is there any issue with my DUNS number?

Basic set up: Managed Google Play + Intune Devices all set up as "Corporate-owned, fully managed user devices" Policies are set to allow all apps from store and to allow other accounts to be installed on devices. GSuite individual Google accounts with corporate email addresses signed in to all devices to allow for things like Photos backup.  Problem: When migrating a user to a new device, some apps cannot be installed. When a user is signed into Google Play with their Google Account, any app that is already linked to their Google Account from their previous device (for example: WhatsApp, Samsung Notes, Translate), cannot be installed with the error "Your administrator has not given you access to this item". If I sign the user out from their Google account, install the app and then sign them in again, it all works fine, but this should not be necessary. It seems like the problem is stemming from the Play Store not liking the fact that th

We publish an Isolated Web App that is force-installed on managed ChromeOSdevices via the Admin Console for an enterprise customer.Since the Chrome 143 managed-installation allowlist requirement, the app shows"This app is unverified and may not work properly" in the Admin Console, and weexpect updates will no longer reach devices until the Web Bundle ID is on theGoogle-managed allowlist.The documentation says the process starts with "Developer/partner reaches outto their Google contact (Partner Engineering or other point of contact)", andthat if we don't have one we are likely not part of the early IWA program:https://developer.chrome.com/docs/iwa/allowlistThe blink-dev PSA lists contact addresses, but they are masked for signed-outreaders:https://groups.google.com/a/chromium.org/g/blink-dev/c/iTCPaBw6HxUWe do not currently have a Partner Engineering contact, and email attempts havenot reached anyone.Question: what is the correct route for a developer in this position to requestIWA all

Hi everyone,We are building Acadhub, an education-focused Android device management solution for schools and educational institutions.Our current solution is a custom Android Device Owner / DPC-based MDM. We manage institution-owned student tablets and have built our own device-management backend and DPC.We are now trying to move toward the Android Enterprise / AMAPI ecosystem so that our solution can integrate with Google's Android Enterprise management APIs and operate as an EMM solution.We submitted an application for Android Enterprise / AMAPI access, but the application was rejected with the following reason:“Business use case not compatible with permissible usage policies.”We are trying to understand what specifically about our use case may not meet Google's requirements.Our current use caseB2B device management for schools and educational institutions Institution-owned Android tablets Student devices managed as fully managed / dedicated devices Device Owner provisioning Applicat

've noticed that the OnePlus 13 is not included in the Android Enterprise Recommended (AER) devices list, which can be found here: https://androidenterprisepartners.withgoogle.com/devices/#!?search=Oneplus.  Could someone provide insight into whether the OnePlus 10R will be added to the AER list in the near future? Your guidance would be greatly appreciated.

Hello,We use QR code provisioning to install our custom Device Policy Controller (DPC) app from a custom download URL (not Google Play).The exact same APK + QR configuration:Works on:Samsung Galaxy S20 — Android 13 / One UI 5.0Blocked on:Samsung Galaxy S21 — Android 14 / One UI 6.1Play Protect stops installation with the message:"App blocked to protect your device. This app can request access to sensitive data. This can increase the risk of identity theft or financial fraud."Provisioning QR:{"android.app.extra.PROVISIONING_DEVICE_ADMIN_COMPONENT_NAME": "<DeviceAdmin component>","android.app.extra.PROVISIONING_DEVICE_ADMIN_PACKAGE_CHECKSUM": "<Package checksum>","android.app.extra.PROVISIONING_DEVICE_ADMIN_PACKAGE_DOWNLOAD_LOCATION": "<S3 bucket url>","android.app.extra.PROVISIONING_LOCALE": "en_US","android.app.extra.PROVISIONING_TIME_ZONE": "Europe/Helsinki","android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED": false,"android.app.extra.PROVISIONING_DEVICE_A

 On September 21, 2026, the Google Chrome Certification Program officially migrated to a new, dedicated management portal: CM Connect.This is now your central hub to schedule exams and access your badges. Keep an eye out for a welcome email in your inbox with your activation details! (example image below) ⚠️ How to Activate Your Migrated AccountYour historical exams and active credentials have already been transferred. Do not register for a new account, as this will cause an error. Instead, activate your profile: Go to the CM Connect Login Page. Click "NEVER LOGGED IN BEFORE?" on the login screen. Enter the exact email address you used for Webassessor to set your password.  📌 Key Rules & Reminders Dedicated Login: Credentials from other Google certification systems (Google Cloud, Workspace, etc.) will not work here. One Account Only: Maintaining multiple profiles violates policy and can lead to credential suspension. ID Verification: Your profile name must exactly match yo

Device: Honeywell EDA52 (Android 11/13, build TKQ1.230420.001)Browser: Reproduced on both Chrome (151.0.7922.139) and Microsoft Edge, same symptom on bothNot affected: Honeywell CT32 devices on the same network/site; EDA52 devices in other locations running the same MDM profileProblemOn a subset of our Android 11/13 handheld scanners, the browser randomly stops accepting any text input, both from the physical/on-screen keyboard and from an attached barcode scanner that injects input as keystrokes. This happens intermittently during normal use of a web-based app (not site-specific, happens on any input field in any website, including a plain Google search box).Symptoms when it occurs:Tapping a key on the on-screen keyboard shows the normal "key press" visual highlight, but no character appears in the field. A connected barcode scanner still fires (beep and aiming light activate normally), but again nothing populates the field. Copy/paste into the same field still works, so the field its

Hi all, We have a customer who is trying to enable a preloaded app on our tablet running Android 16 (basic notes taking app). The tablets are enrolled in Intune in COBO or COSU mode. The package name is correct and added in the app enablement list on Intune, but they see the app stuck on “pending install” state, while it works for other apps such as our camera app. We are unsure what’s causing this, does anyone experienced a similar case and has any advice please? Thanks!

I’m trying to determine whether the https://developers.google.com/android/management/reference/rest/v1/enterprises.policies#assistcontentpolicyis available for BYOD devices?I’m unable to determine what management types it’s available for, usually most settings state they are only available for Corporate Owned work profile devices or fully managed devices  for example. I’m trying to get support from Microsoft (Who are insistent it’s not available for BYOD) to ensure this is available for BYOD devices as we currently have an issue where privileged apps (Assistant apps i.e. Gemini) can grab the screen content from a work profile device.Thanks for your help!

We have a google account where it broke our intune connection this week. We tried to unbind then rebind and we cannot because the domain already exists and the primary account was the only admin account. That account was removed as the only admin with out our knowledge. We cannot seem to get any support on this issue and this a last ditch effort for help. Please help us!!

Ever since ManagedAccountsSigninRestriction was deprecated, the new replacement settings ProfileSeparationSettings and ProfileSeparationDataMigrationSettings do not seem to have the intended effect I require.I previously had it setup so that a user with data in chrome(logged in a unmanaged profile or not) would get the option of migrating data from their existing profile into the new managed profile when signing in. It appears that does not happen.When a user goes to add a profile, they sign in using their managed profile and it simply signs them in with no offer of data migration. This was working with the now deprecated policy with the below setting Force separate profile and forbid secondary managed accounts—The managed account is the primary account. The profile has no secondary accounts. When the profile is created, importing existing browsing data is allowed. The replacement policies do not appear to work. They are applied at the browser/machine level before a user is logged in s

Hi,We run a retail fleet of Android Enterprise dedicated (COSU) devices managed by Intune, with Entra shared device mode and no Managed Home Screen. Devices are Samsung Galaxy XCover6 Pro (SM-G736B), Android 15, build G736BXXSAFYJ3, enrolled via KME, with KSP Premium, KAI and E-FOTA. All our apps are on the KSP battery optimization allowlist.This is the same environment as these two earlier threads, but the symptoms this time are different, so I'm posting it separately:"Disabled apps" (Feb 2025): https://www.androidenterprise.community/android-enterprise-general-discussions-3/disabled-apps-1156 "Intune app disabled" (May 2026): https://www.androidenterprise.community/android-enterprise-general-discussions-3/intune-app-disabled-2570What happened this time (Aug 31, ~12:00 UTC+2, one device so far):Every Intune-managed app was disabled simultaneously: Intune app, Authenticator, Remote Help, Knox Remote Help, Knox Asset Intelligence, our POS app, our own settings app. Icons were greyed out