Unanswered questions

Hello everyone,I am developing a mobile application using React Native for Android, and I need to retrieve the device's IMEI number for device identification and management purposes.I understand that Android 10 and above restrict access to hardware identifiers such as IMEI and that normal applications cannot access them using the standard TelephonyManager APIs.However, I would like to understand whether this restriction can be addressed through Android Enterprise device management (MDM).My questions are: Device Owner / Fully Managed Devices: If our application is deployed on company-owned devices enrolled as fully managed devices through Android Enterprise, can it access the IMEI? Required Permissions: Is granting READ_PHONE_STATE sufficient for a properly configured Device Owner application, or are additional permissions or system-level privileges required? React Native Integration: Since the application is built using React Native, can we implement this functionality through a cu

Hi AE Folks,Our Entra account configured in Intune as the Managed Google Play linked account has been disabled due to ToS violations and the appeal unsuccessful. I need some help untying this knot: why was the account disabled, how can we get it re-instated, how can we add a backup account to avoid this single point of failure, and how can we avoid this problem in the future?I read that we should open a ticket with our EMM: the Intune specialist I spoke to wasn’t aware of a backline Google Enterprise Support channel. Is there a specific group where I should route the ticket?Any and all help would be most appreciated.--BP

Hi Team, Been banging my head against the wall for weeks trying to figure this out Does @Android have a hardware partnership program for manufacturers building Android XR audio glasses?Alternatively, can a manufacturer build audio-only smart glasses on AOSP and get Google’s approval for CDD compatibility and GMS licensing?Any pointers to the right team or documentation would be greatly appreciated! 

The Google Play tool does not appear on some Chromebooks in our organization.All settings are configured correctly in the OU. Some machines in the same OU receive the tool, while others do not.

Hi,We manage Android 14 devices (Grandstream GXV3480, Android Enterprise work-managed, enrolled in Workspace ONE UEM) behind a Palo Alto firewall with a URL allowlist.In our firewall logs, one device repeatedly requests http://www.google.cn/generate_204 (and https://www.google.cn), about 76 times in 4 hours, and the firewall blocks every attempt. At the same time, the other connectivity probes pass: https://www.google.com/generate_204, connectivitycheck.gstatic.com, and play.googleapis.com/generate_204.Google's Android Enterprise Network Requirements lists connectivitycheck.android.com, connectivitycheck.gstatic.com and www.google.com/generate_204 for the connectivity check. It does not mention google.cn anywhere.Questions1. Is www.google.cn (or *.google.cn) required to be reachable for Android Enterprise management, Google Play, Android Device Policy, or Google Play Services to work correctly?2. If it is not required, can the block be left in place without affecting policy enforcement

We identified a reproducible issue affecting all users in our organization when using Gmail for Android with Exchange ActiveSync.EnvironmentGmail client: Android-Mail/2026.09.14.986636867.Release Android Enterprise Motorola Edge 50 Neo Motorola G71 Exchange Server Subscription Edition (latest updates) Ivanti EPMM 12.7.0.0 Ivanti Sentry 10.7.3Issue After device reboot or disable work profile:Existing Exchange contacts remain on device. Gmail starts a new ActiveSync contact synchronization. Another complete copy of the same contacts is created. Contact count continuously grows.Example:Initial sync: ~450 contactsAfter reboot #1: ~900 contactsAfter reboot #2: ~1350 contactsAfter reboot #3: ~1800 contacts Investigation resultsOutlook and Exchange mailbox do not contain duplicate contacts. Duplicates exist only on Android devices. Email and Calendar synchronization work correctly. Same DeviceId is used before and after reboot. Exchange returns HTTP 200 and successful ActiveSync responses. Ex

We have a shared account we use just for the enterprise app store. we are a microsoft company so it is not a "work" account in the traditional sense that its a gsuite email. I have it logged in on a spare tablet, and I set up Google Authenticator and my cell as backups. We do not have to access often as we only need to when we need to add approved apps to the store. We use on handheld scanners in the stores, skorpio x5s. I tried to access this week on my computer I have used in the past. Google is saying it does not recognize the device, then wants me to hit the code on skorpio x5. I have no clue which one as we have 14 in each of our 6 locations. I tried to access on the tablet again, does not recognize the device. It never once has asked me for texted code, or for the authenticator. I went to one location and checked all the skorpio x5s, and not a single one was logged into a google account. We do have it connected to our sureMDM account to allow for selecting the approved apps. How

We're experiencing an intermittent issue with Managed App Configuration on Android Enterprise devices and are looking to understand whether others have seen similar behaviour.Environment:Android Enterprise Dedicated/Fully Managed devices Honeywell devices (CT32 and EDA series) MDM: Hexnode Application: UKG Pro Mobile App configuration deployed via Managed App Configuration through Android EnterpriseIssue:From time to time, and without any obvious trigger, the UKG application appears to lose its managed configuration (tenant URL and related settings). Users are then unable to access the application as expected.What we've observed:The device remains enrolled and managed. The policy is still present within Hexnode. Other device management functions continue to work normally. Re-syncing the policy from Hexnode immediately restores the configuration and resolves the issue.The behaviour appears random, and we have not yet been able to identify a clear pattern related to device model, Android

Hi Google Workspace Community,I'm trying to set up Google Workspace for my UK-based creative and digital marketing business, Three Tapes.Our website is https://threetapes.co.uk, and we're attempting to create our professional business email address: hello@threetapes.co.uk.Initially, we encountered difficulties verifying ownership of our domain. However, when attempting to complete the registration, Google displayed the following error:"Sorry, we can't complete your sign-up."The message explains that Google's automated anti-spam prevention system sometimes rejects legitimate registrations.I want to clarify that: We are a genuine UK-based business. We own and control the domain threetapes.co.uk. We intend to use Google Workspace for legitimate business communication with our clients. We are happy to provide proof of domain ownership and any necessary business verification. Unfortunately, I haven't been able to find a way to contact Google Workspace support directly because our acco

Multiple Chromeboxes are fatally crashing and cannot be restored with Recovery after the last update.Units affected so far are the Asus Chromebox 3 TEEMO D7-A3B-B4Z-S5A-A92 and Acer Chromebox CXI3 D15Q1Stable beta, nothing will bring them back to live. Maybe for a short term but they auto update and die again. Stable even mentions that the mirror image is outdated. I just downloaded a minute ago.Why is Google allowing this?! It started last week.We have a few spare chromebooks and after that it is over. I am so done with this system. They just end production machines at will and do not seem to notice or care at all.Not more ChromeOS for me, I am out. This does not belong in a professional setting!!!!!!

We (the schools district I am employed by) want to block AI Mode and AI Overviews for students in our organization to prevent them from using the AI built into the Google Search Bar to cheat since they can just highlight a question “right-click” and click “search google” any question from their online school homework/quiz content, the AI Overview in the resulting tab will then provide them the answer. We have already implemented all the Enterprise policies related to GenAI and AI Mode and set them to disabled, here is a short list (for reference):GenAiDefaultSettings AIModeSettings DevToolsGenAiSettings GenAIInlineImageSettings GenAILocalFoundationalModelSettings HelpMeWriteSettings SearchContentSharingSettings SmartTabSharingSettings TabCompareSettings VoiceTypingSettings GoogleSearchSidePanelEnabled LensOverlaySettings (depreciated) LensRegionSearchEnabled (depreciated) DnsOverHttpsMode GeminiSettingsEven with all these policies in place to prevent students from accessing any GenAI f

Hello Google Support Team,we are experiencing an issue with our Sauter GmbH Managed Google Play environment and would appreciate your assistance.Organization DetailsOrganization Name: Sauter GmbH Managed Google Play Organization ID:  (**CM - updated to remove personal information) Issue DescriptionOur Managed Google Play organization is successfully connected to Microsoft Intune. The connector status is reported as successful and synchronization between Intune and Managed Google Play is working without errors. Existing approved applications remain visible and available within Intune. [learn.microsoft.com], [learn.microsoft.com]However, we are no longer able to approve new applications for our organization.SymptomsManaged Google Play connector status: Successful Synchronization status: Successful Previously approved applications are visible and functional New applications cannot be approved Accessing Welcome to the Android Enterprise and Chrome Customer Community | Community returns HTT

Hello everyone, we are in Education.We have a Google instance and an Intune instance.We have successfully managed Android devices in Intune, but they are not zero-touch.I understand we can leverage Google as the registrar, then push that device to Intune as the MDM?Is this possible?

Doe’s anyone know if it’s possible to allow “ask gemini” to do browser control I would love to have a feature where it would group my tabs or recommend removal of older tabs that have not been used for a while I am not sure if it’s just a me thing but working remotely I find my self in and out of meeting alot and then having a tab bar that looks something like this so would be great to have a feature that could help me with that but also have control of the page I am viewing to make automation just that much quicker.   

Our students have discovered that if you use the split tab feature in Google Chrome, it hides some tabs from teachers monitoring via classroom management tools. There is no way to configure the split tab view feature in the Admin Console. School districts need the ability to control or disable the new split tab feature. Every time Google makes a new feature available to Workspace users, they need to make it configurable by the administrator.

Our corporate domain is locked by an unknown legacy Android Enterprise binding, and we need to free it to link to Microsoft Intune. We are unable to register and setup a managed google playstore binding in our new intune instance that we are now starting to leverage, as our company domain (bmc.com) is already in use. We know it was a previous IT employee who created the binding, but we have no way to break it / reregister with a new bmc email address (current one ends with .gmail). We found a support article that lead us here to “submit a support request”, but that does not appear to be an option, only posting discussions. Any assistance is greatly appreciated. 

Hi all,We manage fully managed Android devices (company-owned) used as POS/KDS terminals in retail stores, via an EMM that uses the Android Management API.Our requirement: app auto-updates (especially Android System WebView, com.google.android.webview) must not happen during store business hours, because a WebView update restarts our WebView-based app and can interrupt operations.The AMAPI reference for systemUpdate says:"If the update type is WINDOWED, the update window will automatically apply to Play app updates as well."Questions:If we set systemUpdate to WINDOWED (e.g., 02:00–05:00), will Google Play auto-updates of Android System WebView also be restricted to that window? Are there any conditions or exceptions (e.g., Android version, Play Store version, high-priority/security updates, autoUpdateMode settings) where apps are updated outside the window? Is there any other recommended way to prevent WebView auto-updates during specific hours on fully managed devices?Reference: https

I keep getting this error while trying to register, I had ae-community@google.com, but I got a reply saying “Thank you for your interest. Unfortunately, we don't provide specific feedback or details regarding application decisions.”.  I need guidance as to what the next steps are? Is there any issue with my DUNS number?

Basic set up: Managed Google Play + Intune Devices all set up as "Corporate-owned, fully managed user devices" Policies are set to allow all apps from store and to allow other accounts to be installed on devices. GSuite individual Google accounts with corporate email addresses signed in to all devices to allow for things like Photos backup.  Problem: When migrating a user to a new device, some apps cannot be installed. When a user is signed into Google Play with their Google Account, any app that is already linked to their Google Account from their previous device (for example: WhatsApp, Samsung Notes, Translate), cannot be installed with the error "Your administrator has not given you access to this item". If I sign the user out from their Google account, install the app and then sign them in again, it all works fine, but this should not be necessary. It seems like the problem is stemming from the Play Store not liking the fact that th

Device: Honeywell EDA52 (Android 11/13, build TKQ1.230420.001)Browser: Reproduced on both Chrome (151.0.7922.139) and Microsoft Edge, same symptom on bothNot affected: Honeywell CT32 devices on the same network/site; EDA52 devices in other locations running the same MDM profileProblemOn a subset of our Android 11/13 handheld scanners, the browser randomly stops accepting any text input, both from the physical/on-screen keyboard and from an attached barcode scanner that injects input as keystrokes. This happens intermittently during normal use of a web-based app (not site-specific, happens on any input field in any website, including a plain Google search box).Symptoms when it occurs:Tapping a key on the on-screen keyboard shows the normal "key press" visual highlight, but no character appears in the field. A connected barcode scanner still fires (beep and aiming light activate normally), but again nothing populates the field. Copy/paste into the same field still works, so the field its

Hi all, We have a customer who is trying to enable a preloaded app on our tablet running Android 16 (basic notes taking app). The tablets are enrolled in Intune in COBO or COSU mode. The package name is correct and added in the app enablement list on Intune, but they see the app stuck on “pending install” state, while it works for other apps such as our camera app. We are unsure what’s causing this, does anyone experienced a similar case and has any advice please? Thanks!

I’m trying to determine whether the https://developers.google.com/android/management/reference/rest/v1/enterprises.policies#assistcontentpolicyis available for BYOD devices?I’m unable to determine what management types it’s available for, usually most settings state they are only available for Corporate Owned work profile devices or fully managed devices  for example. I’m trying to get support from Microsoft (Who are insistent it’s not available for BYOD) to ensure this is available for BYOD devices as we currently have an issue where privileged apps (Assistant apps i.e. Gemini) can grab the screen content from a work profile device.Thanks for your help!

We have a google account where it broke our intune connection this week. We tried to unbind then rebind and we cannot because the domain already exists and the primary account was the only admin account. That account was removed as the only admin with out our knowledge. We cannot seem to get any support on this issue and this a last ditch effort for help. Please help us!!

Ever since ManagedAccountsSigninRestriction was deprecated, the new replacement settings ProfileSeparationSettings and ProfileSeparationDataMigrationSettings do not seem to have the intended effect I require.I previously had it setup so that a user with data in chrome(logged in a unmanaged profile or not) would get the option of migrating data from their existing profile into the new managed profile when signing in. It appears that does not happen.When a user goes to add a profile, they sign in using their managed profile and it simply signs them in with no offer of data migration. This was working with the now deprecated policy with the below setting Force separate profile and forbid secondary managed accounts—The managed account is the primary account. The profile has no secondary accounts. When the profile is created, importing existing browsing data is allowed. The replacement policies do not appear to work. They are applied at the browser/machine level before a user is logged in s

Hi,We run a retail fleet of Android Enterprise dedicated (COSU) devices managed by Intune, with Entra shared device mode and no Managed Home Screen. Devices are Samsung Galaxy XCover6 Pro (SM-G736B), Android 15, build G736BXXSAFYJ3, enrolled via KME, with KSP Premium, KAI and E-FOTA. All our apps are on the KSP battery optimization allowlist.This is the same environment as these two earlier threads, but the symptoms this time are different, so I'm posting it separately:"Disabled apps" (Feb 2025): https://www.androidenterprise.community/android-enterprise-general-discussions-3/disabled-apps-1156 "Intune app disabled" (May 2026): https://www.androidenterprise.community/android-enterprise-general-discussions-3/intune-app-disabled-2570What happened this time (Aug 31, ~12:00 UTC+2, one device so far):Every Intune-managed app was disabled simultaneously: Intune app, Authenticator, Remote Help, Knox Remote Help, Knox Asset Intelligence, our POS app, our own settings app. Icons were greyed out