Unanswered questions

Hi everyone,We are experiencing an issue and I'm hoping someone in the community has seen this or has a solution. We have multiple users reporting that their cameras freeze or experience significant video lag during Google Meet calls on their Chromebooks. The video feed becomes incredibly laggy and choppy, but the audio occasionally remains clear despite the visual glitches.Hardware Details: Ram: (8GB RAM). Processors Used: AMD Ryzen (e.g., Ryzen 5 series) and i5 Intel processors. ChromeOS Versions: 150.0.7871.213, 150.0.7871.185, and 149.0.7827.238. Behavior: The freezing can occur immediately upon joining a meeting or develop roughly 5 to 10 minutes into the call. Timeline: Started ~4 weeks ago (no issues prior to this). Support Feedback: We have an open ticket with Google Workspace Support. They noted high CPU usage during sample calls and suggested CPU temperature might be the culprit. However, our live monitoring shows CPU temperatures remain steady at around 50°C to 70°

크롬북 모델은 BUGZZY - HQLQ 입니다.계속 전원을 껐다켜도 '문제가 발생한 경우' 같은 오류 메세지 화면이 뜹니다. 학교에서 사용하는 크롬북인데, 제가 관리자 입니다. 문제 해결을 시도해 보려면 복구 프로세스를 시작하라고 해서 복구 프로세스로 들어가고 USB를 활용해서 복구를 해보려고 하였으나 usb 를 꽂는 단계에서 오류가 발생했다는 메세지가 계속 뜹니다. 안드로이드 휴대전화로 복구도 시도해보았으나 앱을 설치하는 QR 을 찍어보니 링크가 알맞지 않다는 말이 뜹니다. 

We’re in the process of submitting a new application for the Android Enterprise Partner Program for our organization, but we’ve hit a roadblock due to a technical issue during the D-U-N-S verification step.Every time we enter our valid D-U-N-S number, the portal shows the error:“Something went wrong! If this problem persists, please contact support.”Because of this, we can’t complete or submit the application. We’ve already reached out to the Enterprise Team via email, but haven’t received any response yet.

Good morning, Asking here, as i find a lot of different info on the net. We run a hybrid solution of enduser devices, both windows and Chromebooks. Now, the problem is that we have certain apps that is different on Chrome and Windows, like the Citrix workspace. To make it more symmetric, we are thinking about the Citrixc HTML5 as an alternative, that would let veryone use the same app, and remove the confusion that occurs when users log inot windows and get teh Citrix app fir noth chrome and windows on their device. Do anyone have any experience with the HTML version? I read a lot about some serious limitations in certain features like video / audio, support for multiple screens etc? :) 

Hi, We recently moved to android enterprise with work profile (using Intune) for all of our android users. And we just found out that with android enterprise with work profile does not support wearOS yet so that our users cannot add their corporate email account (O365) to the outlook app on their samsung watch or pixel watch.we tried to contact microsoft about this and microsoft said that this is not up to Microsoft but it is up to Google Android whether they would like to support wearOS for work profile. Can Google confirm if they would like to provide some support for work profile in the future for wearOS as well? I know that any development of newly feature in android system are fully confidential but it would be good for android end users to know if Google has a plan to support this in the future or not.

Hi everyone, I’m trying to use client certificate authentication (mTLS) with Chrome Custom Tabs on Android. We want to automatically select the client certificate without prompting the user, and also ask for their username and password as part of the login process. This way, we can combine both certificate-based authentication and user credentials for device attestation. On desktop Chrome, this can be done using a policy like AutoselectCertificateForUrls, but it seems this doesn’t work on Android. If this is a known limitation, is there a way to request this feature from the Android or Chrome team?

Hi,We run a retail fleet of Android Enterprise dedicated (COSU) devices managed by Intune, with Entra shared device mode and no Managed Home Screen. Devices are Samsung Galaxy XCover6 Pro (SM-G736B), Android 15, build G736BXXSAFYJ3, enrolled via KME, with KSP Premium, KAI and E-FOTA. All our apps are on the KSP battery optimization allowlist.This is the same environment as these two earlier threads, but the symptoms this time are different, so I'm posting it separately:"Disabled apps" (Feb 2025): https://www.androidenterprise.community/android-enterprise-general-discussions-3/disabled-apps-1156 "Intune app disabled" (May 2026): https://www.androidenterprise.community/android-enterprise-general-discussions-3/intune-app-disabled-2570What happened this time (Aug 31, ~12:00 UTC+2, one device so far):Every Intune-managed app was disabled simultaneously: Intune app, Authenticator, Remote Help, Knox Remote Help, Knox Asset Intelligence, our POS app, our own settings app. Icons were greyed out

SummaryPublishing a private app via the Managed Google Play iframe embedded in Microsoft Intune (Apps → Android → Add → Managed Google Play app → Private apps) consistently fails with a generic "Can't publish app. Try again in a few minutes." UI error. Inspecting the underlying network request shows the backend RPC call returns an INTERNAL error code.EnvironmentIntune tenant: trial (Intune Plan 1) Managed Google Play enterprise: created via Intune's standard "identity" connection flow (no Google Workspace domain) Device tested against: Android, enrolled via Company Portal as Personally Owned Work Profile, showing Compliant in Intune Browser: [fill in your browser + version] Tested across: original Google account binding, and a completely fresh account after a full retire + unbind + reconnect cycle — same result both times Tested across two networks (to rule out local network/firewall interference) — same result on both after resolving an initial ERR_CONNECTION_CLOSED on one networkStep

Downloads folder is redirected to serverdefault save location is set correctlyusers has full rights on folderchanging setting to not prompt for save has no impact

We use Google Chrome on Android Enterprise Fully Managed shared devices. Chrome is required for several business use cases including Chrome Custom Tabs (CCT) authentication flows and PWA/web applications.Our environment follows a shared-device model where associates check devices in and out throughout the day. While Chrome is needed for business workflows, users can sometimes reach the full Chrome browser through links opened from applications, authentication flows, PWAs, or other navigation paths.Unless I'm missing something, I have not found a supported Chrome Enterprise app configuration that allows administrators to disable or hide the Chrome address/search bar (omnibox) on Android managed devices. Current options appear to be URL allowlists and blocklists. The challenge with URL-based controls is that they can become difficult to maintain at scale. Business applications often introduce new URLs, redirects, and endpoints over time, which can create ongoing administrative overhead a

Hello, We force users to change regularly the device passcode and I’m getting a request from the support because they receive lot of calls from users that don’t understand what happens. USers are telling the device is blocked on a screen with passcode menus and that they can’t escape it. Some are also wiping the device to resolve the issue …Even if they receive the emails telling them they’ll need to change the device passcode, if they don’t change it, when it expires they are getting a notification that displays less than 1 second and then are locked on the screen to set a pincode / passcode. Question 1 : Are we alone to get this user misunderstanding ?Question 2 : Would it be possible to set a custom message that we would push to help users understanding that their code has expired and that they need to change it ? Best regards

Hello,I took over an IT department with numerous company owned phones.  The previous IT department did not use an MDM and did not keep track of login information for the phones.  They would create a new gmail account for each phone and allow the end user to create their own PIN.  I need to access these phones and put them on the MDM. Thank You, Jason

I am the founder and CEO of EMMI Technologies. For more than ten days, we have been unable to access the Google Play Console controlling our Android healthcare applications.Existing case 3-6206000041891 remains unresolved. Google Workspace Support redirects us to Google Play Support, while Google Play Support redirects us back to Workspace. We cannot access either the Workspace Admin Console or the Play Console.We completed Google’s requested ownership verification, including domain verification through DNS. Support then suggested transferring the applications to another developer account but instructed us to perform the transfer ourselves, despite our inability to access the existing account.Our Android customers urgently require support and application updates that we cannot provide. Our iOS customers continue receiving our improvements because our Apple developer access remains operational.Has anyone found a way to reach a senior Google Play account-access specialist who can take ow

Hello,we would like to ask whether other customers using Samsung devices with Android 16 / One UI 8.5 have observed similar behavior. Environment- Samsung Galaxy tablets e.g. X816B- Android 16 / One UI 8.5- Android Enterprise (COPE) & Intune- Screen Pinning / App Pinning used for dedicated business applications After upgrading affected devices to One UI 8.5, notifications and certain system UI elements can appear while an application is pinned. In our environment, this behavior was not observed before the Android 16 / One UI 8.5 update and appears to be related to a change in the interaction between Screen Pinning and notification handling. This issue represents a significant operational risk for our environment. Prior to Android 16 / One UI 8.5, notifications were effectively suppressed while an application was running in Screen Pinning mode. Since the identified Android framework change, certain notifications can appear despite active Screen Pinning, impacting the intended behavi

 We are certified Android Enterprise Mobility Management (EMM) provider and an authorized Zero-touch Reseller based in Bangladesh. We specialize in enterprise mobility, with our proprietary MDM platform, MobiManager, actively used by leading organizations for secure device management at scale. In line with the growing demand for secure and inclusive smartphone access, we’ve developed PayProtect—a custom Device Policy Controller (DPC) tailored to support EMI-based smartphone financing. This solution enables real-time compliance, device-level control, and robust protection against default, thereby minimizing risks for telcos, lenders, and retailers. Now we want to integrate Google’s Device Lock Controller (DLC) for built-in solution for better performance. So how can we make partnership Google’s Device Lock Controller (DLC). Thanks in advance.

I have completed all the Android Enterprise courses and obtained the Expert certification. However, the Zero-touch Enrollment Training still does not show as finished. What steps do I need to take to become a Zero-touch Enrollment Reseller? 

We’ve got a fleet of corporate owned and Intune enrolled Android devices. For a couple of years, we’ve leaned on “Enable browser access” in authenticator to install a certificate for chrome and WebView browser access to MS resources. That cert passes device information usually without trouble through our CA policy. This week I have had two devices that are unable to recreate the cert. When attempting to rebuild it, an error pops up but is cut off. It says something to the effect, “Certificate installation was unsuccessful becau…”. Not exactly the most helpful for troubleshooting. So I’ve got a few questions. If we have already cleared all creds and user certs out of advanced security options. is there somewhere else that certificate lives? Are there any ways to grab the full error message, or expand the pop up error?Is there a better way to allow webview to pass device information through to entra?At the first webview launch with the new cert, a popup asks if we want to use the new cer

Hi,We want to use GBoard on kiosk devices but we aren't able to remove the suggestion strip using managed configurations.All other settings can be configured fine though.The show suggestion strip configuration is set to disabled.But with versions 15.x and 16.x of GBoard it's still visible on the devices.And when checking the setting locally on the device it's still enabled (Disabling manually works fine)Back in version 14.x this configuration worked fine.Anyone else who has experienced the same thing?We've tested this on devices from Samsung, Bluebird, ELO, and Zebra.Android version doesn't seem to have any impact, just the GBoard version.// Magnus

Hello everyone, did you encounter any issues with the switch to AMAPI through Intune ? Any devices running through AMAPI is not able to connect to our dedicated SSID through a configuration profile (certificate) We get an error from Intune’s report and nothing is applied on the device ! Sadly it was working before ! Thank you for your help Best Regards

Dear Team,While signing up in android enterprise partner portal got below error.Can you please help us ? how to resolve this. 

Hello,I am trying to configure managed client certificate support for Chrome on iOS using Chrome Enterprise Core.My environment is: Chrome Enterprise Core is enabled Chrome for iOS version 151.0 “Apply supported user settings to Chrome on iOS” is enabled The user is signed in to Chrome with a managed Google Workspace account I am checking: Devices → Chrome → Settings → User & browser settings According to the Chrome Enterprise policy documentation, ProvisionManagedClientCertificateForUser supports Chrome on iOS and iPadOS starting with version 147.The Chrome Enterprise release notes also state that administrators should configure the following policies: ProvisionManagedClientCertificateForUser ProvisionManagedClientCertificateForBrowser AutoSelectCertificateForUrls However, ProvisionManagedClientCertificateForUser and ProvisionManagedClientCertificateForBrowser do not appear in the Google Admin console. I searched using both the English policy names and the localized po

Hello Android Enterprise team,We are currently developing our own Enterprise Mobility Management (EMM) solution for Android devices.Our company develops and provides Android devices, and we are working on our own EMM platform, including an EMM console/backend and a Device Policy Controller (DPC) application.We are currently integrating the Android Management API (AMAPI) and understand that Android Device Policy is the standard DPC approach for new EMM solutions.However, we also have our own custom DPC application and would like to understand whether there is still a supported path for getting our custom DPC verified/approved by Android Enterprise.Our questions are: Can a new EMM provider currently have its own custom DPC verified and added to the Android Enterprise approved/allowlisted DPCs? If yes, what is the current process for submitting a custom DPC for Android Enterprise verification and approval? Is there a separate registration or approval process for the custom DPC, or is

I keep getting this error while trying to register, I had ae-community@google.com, but I got a reply saying “Thank you for your interest. Unfortunately, we don't provide specific feedback or details regarding application decisions.”.  I need guidance as to what the next steps are? Is there any issue with my DUNS number?

i got stuck with one situation and need your guidance in solving it. We have our own .apk file for android devices, these are custom in-house developed applications, i want to deploy the application to Android Fully Managed devices (Since the device belongs to company). I did it before with publishing them to google play store as a private app but now the size is the problem as it exceed 200MB, so i cannot use this option. I tried with deploying them as Line of Business application but its been 2 days nothing shows on device and even in intune portal it neither failed or success.  Question: How to deploy your custom .apk files to android fully managed devices if the file size se more than 200MB?

Hi everyone,I need assistance regarding access to the Google Zero-Touch Portal for our organization.The Issue: When attempting to sign in at [partner.android.com/zerotouch](https://partner.android.com/zerotouch), I consistently receive the following error message: 403 - The account doesn't have permission to see this pageCurrent Setup & Troubleshooting Completed: Google Account: A standard Google Account has been created and verified using our custom company domain email address. Reseller Assignment: Our reseller (A1) confirmed that our Customer ID has been set up and that our business email address was added as an Administrator in their reseller portal. Isolation Testing: Login attempts were conducted using an Incognito / Private browser window to eliminate multi-account session conflicts or caching issues. Reseller Feedback: The reseller states that all configurations on their end are correct and that they cannot troubleshoot account or permission issues further within the Go