Unanswered questions

Hi there,I have a couple of Lenovo K11 wifi only models and the reseller has uploaded the serial number into our AZT account, the device has been assigned a configuration profile which is the same used for mobile phones.Problem i have is the tablets setup like a personal device and not a corporate owned, i’ve reset the tablet and had the reseller upload the serial number but still the same outcome.Intune isnt connected to our AZT account and i don’t know how else to troubleshoot this. The following “DPC extras” is what i used for the tablet setup{    "android.app.extra.PROVISIONING_DEVICE_ADMIN_COMPONENT_NAME": "com.google.android.apps.work.clouddpc/.receivers.CloudDeviceAdminReceiver",    "android.app.extra.PROVISIONING_DEVICE_ADMIN_SIGNATURE_CHECKSUM": "I5YvS0O5hXY46mb01BlRjq4oJJGs2kuUcHvVkAPEXlg",    "android.app.extra.PROVISIONING_DEVICE_ADMIN_PACKAGE_DOWNLOAD_LOCATION": "https://play.google.com/managed/downloadManagingApp?identifier=setup",    "android.app.extra.PROVISIONING_ADMIN

We have a google account where it broke our intune connection this week. We tried to unbind then rebind and we cannot because the domain already exists and the primary account was the only admin account. That account was removed as the only admin with out our knowledge. We cannot seem to get any support on this issue and this a last ditch effort for help. Please help us!!

Hi All,I have asked Gemini already so have the recommended 3 options but,If hypothetically we had an Analyst transfer a leavers data to an incorrect internal person within our Workspace, is the only realistic option to transfer the data back to the correct person to use the investigation tool and then transfer the data in bulks of 300 at a time over to them?Gemini did say GAM can be used ‘or’ transfer all data using the tools within Admin but it looks like both of these options would move all of the data from the person it was transferred to not just the incorrectly transferred files?

我已经尝试过很多次为我的emm项目申请初始配额，但结果不是被拒绝就是没有回复，我们的业务只是为工厂和销售公司提供emm解决方案，我不清楚我们的业务哪里违反了谷歌emm服务的使用条款，我也尝试申请成为谷歌emm合作伙伴，但申请也被拒绝，请问一下我的问题应该向谁求助？(Translation added by ​@Kirk )Questions regarding Google EMM initial quotas and applying to become a Google EMM partner I have tried many times to apply for initial quotas for my EMM project, but the results are either rejection or no response. Our business only provides EMM solutions to factories and sales companies. I am not clear on where our business violates the Google EMM service terms of use. I also tried to apply to become a Google EMM partner, but the application was also rejected. Who should I seek help from for my problem? 

Hi all,I'm giving you a brainteaser about the tablets we manage.The pentest conducted by our red team required us to disable the translation features in Google Chrome.Currently, when the TranslateEnabled policy is set to false, Chrome for Android correctly removes "Translate" from the overflow menu (⋮) and the long-press context menu. However, the Adaptive Toolbar Shortcut (the dynamic button next to the Omnibox) remains active or selectable, allowing users to bypass the restriction.Google Chome Android with Translation button recommandationLogically, if the Toolbar Shortcut was previously set to "Translate" (either manually or via "Based on your usage") before the policy was applied, the button must be hidden or replaced by the default shortcut once the policy is active. Or other behaviour such as should trigger a "Feature disabled by your administrator" message or simply perform no action.Unfortunately, there is no policy for managing the toolbar shortcut. Do you have any idea how to

Hi everyone, We're setting up Android Auto on fully managed devices through Android Enterprise, but we've run into an issue. When using the voice assistant to make calls, it fails because Google Assistant seems to require signing in with a personal account. Unfortunately, since we block personal Google accounts, our users can't log in, which prevents this functionality from working. Has anyone encountered this issue before? Are there any solutions that don't involve enabling personal Google account login? Thanks in advance for your help!

 Hello, We have observed a significant change in S-Pen behavior following the integration of Google Scribe into Android 15 / 16 on our Galaxy Tab Active 5. Previously, the stylus allowed cursor movement (or select an write area) within text fields without triggering handwriting input. This was essential for our use case. Our technicians are working in proximity to high-voltage electricity and must wear protective gloves. The stylus is their only means of interacting with the tablet during operations. With the recent change, the stylus now immediately writes in text areas instead of moving the cursor, making it impossible to position the cursor without touching the screen with a finger (which is not feasible in our environment). Before with old firmware (Android 14): https://youtube.com/shorts/RXaPRRXaNcs?feature=share After with latest version of Android with Google Scribe (Android 15/16) : https://youtu.be/ZfKKCKcfxUc / https://youtube.com/shorts/EbuibT211lg&n

We have a BYOD deployment where users enroll their personal Android devices and get a work profile. Inside the work profile, we deploy an internal app that handles URLs for one specific corporate domain (e.g. internalapp.company.com). We also deploy Edge as the default browser in the work profile.Desired behavior:Links to internalapp.company.com → open in our app All other links → open in Edge as normalThe problem: We cannot host assetlinks.json publicly on that domain, so standard App Links verification is not an option.What does work (manually): On each device, going to Settings → Apps → [Our App] → Open by default → Add link and checking the domain works perfectly. After that, links from Slack, email, etc. open in our app as expected.But we have hundreds of devices and need this enforced administratively through MDM (Intune/WorkspaceOne).Has anyone found a way to push this domain-to-app association via MDM policy in Work Profile mode? Or any other enterprise-managed approach that av

Hello,I'm Peter, from Hungary.We use in our enterprise mobile fleet the Blackberry UEM management service, and we have a lot of SAmsung device with Android Enterprise fully managed workspace.Several day age, we noticed a problema on our devices with Google Maps and Waze.We colsulted a lot with Blackberry, and figured out the problem maybe in the navigation apps mentioned above.Here is the circumstances:update the Android OS from 14, 15 to Android 16, then update all available application, which is included navigation apps. then a lot if user cannot use navigation anymore, because it cannot run due to Network issue.We checked the hole infrasrtukture, IT policies with UEM technician.We use container-wide VPN (Blackberry own VPN tunnel), but navigation apps routed directly to internet (exepted from VPN tunnel).Here some logs from a devices, which is cant run Waze and Maps:Line 701846: 2026-04-08T13:24:13.508245 - PROBE_HTTP http://connectivitycheck.gstatic.com/generate_204 Probe failed wi

I want to know status for oneplus 13 and 15R for Android enterprise recommended list. Oneplus 13 is mentioned in the list however the device available to region APAC. is not included. Even though device can be purchased in India does this mean it will not work for enterprise application in India. Example intune. Secondly want to know when the oneplus 15R model will be added to the Android enterprise recommended list. Lastly I want to know if work profile and in tune can still work on latest oneplus model even though not in device list for Android enterprise.

Hello Community,I hope you’re all doing well.Our company is using Google Zero‑Touch in combination with Microsoft Intune for managing Android Enterprise devices.One of our suppliers has informed us that they are unable to add a device we previously purchased from them to our Zero‑Touch portal. They can only add devices from new or future orders. They suggested that we contact Android Zero‑Touch support regarding this issue.This seems unusual, as other suppliers have been able to add devices from past orders without any problems.Has anyone experienced this before, or can offer guidance?Thank you,Nihad

First, do Android support using Fido2 keys on Android?Yes, it does support both using bluetooth, NFC and USB authentication.For reference: https://developers.google.com/identity/fido/android/native-apps But does it mean that it is straight forward to use it in a enterprise environment without hiccups?No, the support lacks many features that both Windows and iOS has supported for long time. If I buy a modern Fido2 with OTP support, will it work straight out of the box for using the USB?No, you need to disable the OTP support first. Here is how you can do that from yubikey manager, this works for Yubikey.Other vendors might have something similar. But for Fido2 keys without OTP support, it should work out of the box for USB-C, like Google titan.  Why this happens, dont know.Can we use NFC for Entra ID authentication like we can on Windows and iOS?No. Android does not currently support CTAP2 for NFC, only for USB-C input. CTAP1 (FIDO U2F) supports certificate based authenti

Learn more about the changes to the new zero-touch customer portal   The new zero-touch customer portal has been designed to make it easier for you to manage your account. Here are some of the key changes: New look and feel: The portal has been redesigned with a modern look and feel, making it easier to navigate and find the information you need. Improved navigation: The navigation menu has been simplified and reorganized, making it easier to find the pages you're looking for. Updated Terms of service: Updated the zero-touch customer terms of service and customers will be prompted to accept the terms of service upon next login to the zero-touch customer portal. The terms of service need to be accepted once by an admin or owner of the customer account. If you own multiple accounts, you might need to accept the terms of service for each one. Note: when attempting to access the zero-touch customer API. Any existing solutions leveraging the zero-touch customer APIs to access an acco

I have found a variety of these questions posted both here as well as across other places on the net.It seems that the requirements to apply a bulk change to devices in ZTE are very specific. I cannot find a way to make it work. I’ve tried CSV files from Excel, Google Sheets, as well as just making it in a plain text editor.Every single time the file is rejected as an unsupported file type. I would really like some clear guidance on how to make this work consistently if at all possible.Thanks.

I believe someone is using Enterprise either Android or Google to manage my phone for malicious reasons when I am not an employer. 

Hi everyone, I’m looking for guidance on an issue affecting multiple Motorola Moto G 5G (2022) devices that are currently stuck on the reboot screen and unable to boot into the system. We’ve already tried several troubleshooting steps, including performing a hard reset and attempting to clear the app cache via recovery mode. However, the usual options such as “Wipe data/factory reset” and “Clear cache” are not available. The devices only show limited options like reboot system, bootloader, and power off. Because of this, we’re unable to proceed with standard recovery or reset methods, and the devices remain unusable. Has anyone encountered a similar issue or found additional troubleshooting steps that might help resolve this? Any suggestions, especially around accessing full recovery mode or alternative recovery methods would be greatly appreciated. Thanks in advance for your help!

Hi,One of our customers has requested a change to their customer name in the Zero Touch portal. I can’t see an option to update this directly.I found a note suggesting this needs to be done by raising a support ticket, but I’m not sure where or how to do that.Could someone please point me in the right direction? Thanks in advance 🙂

I have enrolled a device and working fine but after some days when we try to access playstore it show offline mode of playstore. I have attached image for more clarification. What is the actual issue behind that.thanks in advance. 

Hello Android Enterprise Community,I am the developer of MDM solution. We are facing a critical issue with Google Play Protect (GPP) blocking our Device Policy Controller (DPC) during enrollment.Issue Description:Error message: “This app can request access to sensitive data” when installing the MDM Agent APK via QR Code provisioning on Android 16 (and some earlier versions). We have thoroughly reviewed and ensured compliance with Google’s guidelines: Warning Dev Guidance ,  Potentially Harmful Applications (PHAs) ,  Mobile Unwanted Software (MUwS) We have submitted the Play Protect Appeal multiple times (more than 4 appeals over the past 2 months) via Play Protect appeal . However, our DPC is still being blocked.Our Solution Details:Primary deployment mode: Fully Managed Device (Device Owner). Used exclusively internally within our company (On-Premise environment, no public distribution). Heavily focused on Samsung Galaxy devices - we integrate Samsung Knox SDK for additional policies

Hello, all!My team is looking at deploying a custom XML payload that will disable the user’s ability to enable Wi-Fi Sharing on their Mobile Hotspot. The setting is located here (on Android 16): Settings > Connections > Mobile Hotspot and Tethering > Mobile Hotspot > then under network name and Advanced the option to disable Wi-Fi Sharing is there.Our goal is to configure this option OFF via custom XML and not allow the user to configure it on our managed devices.Initial research showed us that the configuration parameter was:<parm name="AllowWiFiSharingViaHotspot" value="false" type="boolean" />However, testing this didn’t yield any results.I can post the full XML profile if needed, but really what I am looking for is something that may guide me to the configuration parameters that are available to MDM’s. 

Hey! We recently noticed that a banner is displayed on https://play.google.com/work/apps . According to this, /work will be terminated on April 15. I am aware that the page is generally somewhat outdated and is intended for deprecated EMM APIs. (e.g. https://developers.google.com/android/work/play/emm-api/v1/products/approve ) /work has always been useful for us when it comes to getting a first impression of an app. By replacing /store with /work in the store URL, you could see immediately whether the app was available for Managed Play and offered an AppConfig.https://play.google.com/store/apps/details?id=com.google.android.apps.tachyonhttps://play.google.com/work/apps/details?id=com.google.android.apps.tachyon Will the pages be discontinued without replacement, or is there an alternative? (I mean, yes, you can see everything in the iFrame, but the hurdle for /work was very low and therefore very practical).

Hi everyone,We are a new company currently integrating Android Enterprise using the Android Management API, and we are completely blocked at the onboarding stage due to quota restrictions.As per the documentation, we understand that an initial quota of up to 500 devices requires a business justification, and we have already submitted the required request form. However, we have not received any response or acknowledgment so far.At present, our project is effectively limited to 0 devices, which is preventing us from even beginning integration, testing, or validation of our solution. This is a critical blocker for us, as we are unable to move forward without basic provisioning access.We would appreciate urgent clarification on:Expected turnaround time for initial quota requests Whether there is any way to enable minimal access for development/testing while the request is under review The correct escalation path for such casesThis delay is directly impacting our project timelines and deliv

Dear Android Enterprise Support Team, I am experiencing an issue while attempting to enroll my HONOR Magic V5 device into Microsoft Intune for device management. I just bought the device one week ago, but when I try to add a work profile, I receive the following error message:"Can't add work profile. A work profile can't be added to this HONOR Magic V5. If you have questions, contact your IT admin."This issue is preventing me from completing the enrollment process required by my organization. I have already consulted with my company’s global IT support team, and they confirmed that there is no alternative solution on our side. The only way to resolve this issue is for HONOR to make the HONOR Magic V5 compatible with the Microsoft Intune application and Android Enterprise work profile enrollment.Device Details:Model: HONOR Magic V5OS Version: Magic OS 9.0.1Android version: 15Model: MBH-N49Error Screenshot: attached as below  Could you please advise if this device supports

I downloaded the work profil but not showing on the screen on HONOR Magic V5 anyone can help    

Hello,We have been using a device policy enforcement which leverage Endpoint Verification Chrome Extension, which limits users access to protected apps on Desktop browsers only.Some users are starting to use larger Android devices for their day-to-day (BYOD, managed by Google MDM with Android Work Profile), and sometimes clicking on links forces opening the browser instead of the native apps, which prevents users from being able to do the work.Would using Managed Chrome browser enforcement work here? How would that work with BYOD devices? What would CEL be? How does enrolling Chrome browser work for BYOD Android devices? https://support.google.com/chrome/a/answer/12120610?hl=enhttps://knowledge.workspace.google.com/admin/security/use-case-managed-chrome-browser-enforcementhttps://knowledge.workspace.google.com/admin/security/context-aware-access-examples-for-advanced-modehttps://docs.cloud.google.com/access-context-manager/docs/custom-access-level-spec