Unanswered questions

Hi Google Workspace Community,I'm trying to set up Google Workspace for my UK-based creative and digital marketing business, Three Tapes.Our website is https://threetapes.co.uk, and we're attempting to create our professional business email address: hello@threetapes.co.uk.Initially, we encountered difficulties verifying ownership of our domain. However, when attempting to complete the registration, Google displayed the following error:"Sorry, we can't complete your sign-up."The message explains that Google's automated anti-spam prevention system sometimes rejects legitimate registrations.I want to clarify that: We are a genuine UK-based business. We own and control the domain threetapes.co.uk. We intend to use Google Workspace for legitimate business communication with our clients. We are happy to provide proof of domain ownership and any necessary business verification. Unfortunately, I haven't been able to find a way to contact Google Workspace support directly because our acco

Hi AE Folks,Our Entra account configured in Intune as the Managed Google Play linked account has been disabled due to ToS violations and the appeal unsuccessful. I need some help untying this knot: why was the account disabled, how can we get it re-instated, how can we add a backup account to avoid this single point of failure, and how can we avoid this problem in the future?I read that we should open a ticket with our EMM: the Intune specialist I spoke to wasn’t aware of a backline Google Enterprise Support channel. Is there a specific group where I should route the ticket?Any and all help would be most appreciated.--BP

Hello Google Support Team,we are experiencing an issue with our Sauter GmbH Managed Google Play environment and would appreciate your assistance.Organization DetailsOrganization Name: Sauter GmbH Managed Google Play Organization ID:  (**CM - updated to remove personal information) Issue DescriptionOur Managed Google Play organization is successfully connected to Microsoft Intune. The connector status is reported as successful and synchronization between Intune and Managed Google Play is working without errors. Existing approved applications remain visible and available within Intune. [learn.microsoft.com], [learn.microsoft.com]However, we are no longer able to approve new applications for our organization.SymptomsManaged Google Play connector status: Successful Synchronization status: Successful Previously approved applications are visible and functional New applications cannot be approved Accessing Welcome to the Android Enterprise and Chrome Customer Community | Community returns HTT

Hello everyone, we are in Education.We have a Google instance and an Intune instance.We have successfully managed Android devices in Intune, but they are not zero-touch.I understand we can leverage Google as the registrar, then push that device to Intune as the MDM?Is this possible?

Doe’s anyone know if it’s possible to allow “ask gemini” to do browser control I would love to have a feature where it would group my tabs or recommend removal of older tabs that have not been used for a while I am not sure if it’s just a me thing but working remotely I find my self in and out of meeting alot and then having a tab bar that looks something like this so would be great to have a feature that could help me with that but also have control of the page I am viewing to make automation just that much quicker.   

Our students have discovered that if you use the split tab feature in Google Chrome, it hides some tabs from teachers monitoring via classroom management tools. There is no way to configure the split tab view feature in the Admin Console. School districts need the ability to control or disable the new split tab feature. Every time Google makes a new feature available to Workspace users, they need to make it configurable by the administrator.

Our corporate domain is locked by an unknown legacy Android Enterprise binding, and we need to free it to link to Microsoft Intune. We are unable to register and setup a managed google playstore binding in our new intune instance that we are now starting to leverage, as our company domain (bmc.com) is already in use. We know it was a previous IT employee who created the binding, but we have no way to break it / reregister with a new bmc email address (current one ends with .gmail). We found a support article that lead us here to “submit a support request”, but that does not appear to be an option, only posting discussions. Any assistance is greatly appreciated. 

Hi all,We manage fully managed Android devices (company-owned) used as POS/KDS terminals in retail stores, via an EMM that uses the Android Management API.Our requirement: app auto-updates (especially Android System WebView, com.google.android.webview) must not happen during store business hours, because a WebView update restarts our WebView-based app and can interrupt operations.The AMAPI reference for systemUpdate says:"If the update type is WINDOWED, the update window will automatically apply to Play app updates as well."Questions:If we set systemUpdate to WINDOWED (e.g., 02:00–05:00), will Google Play auto-updates of Android System WebView also be restricted to that window? Are there any conditions or exceptions (e.g., Android version, Play Store version, high-priority/security updates, autoUpdateMode settings) where apps are updated outside the window? Is there any other recommended way to prevent WebView auto-updates during specific hours on fully managed devices?Reference: https

We're experiencing an intermittent issue with Managed App Configuration on Android Enterprise devices and are looking to understand whether others have seen similar behaviour.Environment:Android Enterprise Dedicated/Fully Managed devices Honeywell devices (CT32 and EDA series) MDM: Hexnode Application: UKG Pro Mobile App configuration deployed via Managed App Configuration through Android EnterpriseIssue:From time to time, and without any obvious trigger, the UKG application appears to lose its managed configuration (tenant URL and related settings). Users are then unable to access the application as expected.What we've observed:The device remains enrolled and managed. The policy is still present within Hexnode. Other device management functions continue to work normally. Re-syncing the policy from Hexnode immediately restores the configuration and resolves the issue.The behaviour appears random, and we have not yet been able to identify a clear pattern related to device model, Android

I keep getting this error while trying to register, I had ae-community@google.com, but I got a reply saying “Thank you for your interest. Unfortunately, we don't provide specific feedback or details regarding application decisions.”.  I need guidance as to what the next steps are? Is there any issue with my DUNS number?

Basic set up: Managed Google Play + Intune Devices all set up as "Corporate-owned, fully managed user devices" Policies are set to allow all apps from store and to allow other accounts to be installed on devices. GSuite individual Google accounts with corporate email addresses signed in to all devices to allow for things like Photos backup.  Problem: When migrating a user to a new device, some apps cannot be installed. When a user is signed into Google Play with their Google Account, any app that is already linked to their Google Account from their previous device (for example: WhatsApp, Samsung Notes, Translate), cannot be installed with the error "Your administrator has not given you access to this item". If I sign the user out from their Google account, install the app and then sign them in again, it all works fine, but this should not be necessary. It seems like the problem is stemming from the Play Store not liking the fact that th

Device: Honeywell EDA52 (Android 11/13, build TKQ1.230420.001)Browser: Reproduced on both Chrome (151.0.7922.139) and Microsoft Edge, same symptom on bothNot affected: Honeywell CT32 devices on the same network/site; EDA52 devices in other locations running the same MDM profileProblemOn a subset of our Android 11/13 handheld scanners, the browser randomly stops accepting any text input, both from the physical/on-screen keyboard and from an attached barcode scanner that injects input as keystrokes. This happens intermittently during normal use of a web-based app (not site-specific, happens on any input field in any website, including a plain Google search box).Symptoms when it occurs:Tapping a key on the on-screen keyboard shows the normal "key press" visual highlight, but no character appears in the field. A connected barcode scanner still fires (beep and aiming light activate normally), but again nothing populates the field. Copy/paste into the same field still works, so the field its

Hi all, We have a customer who is trying to enable a preloaded app on our tablet running Android 16 (basic notes taking app). The tablets are enrolled in Intune in COBO or COSU mode. The package name is correct and added in the app enablement list on Intune, but they see the app stuck on “pending install” state, while it works for other apps such as our camera app. We are unsure what’s causing this, does anyone experienced a similar case and has any advice please? Thanks!

I’m trying to determine whether the https://developers.google.com/android/management/reference/rest/v1/enterprises.policies#assistcontentpolicyis available for BYOD devices?I’m unable to determine what management types it’s available for, usually most settings state they are only available for Corporate Owned work profile devices or fully managed devices  for example. I’m trying to get support from Microsoft (Who are insistent it’s not available for BYOD) to ensure this is available for BYOD devices as we currently have an issue where privileged apps (Assistant apps i.e. Gemini) can grab the screen content from a work profile device.Thanks for your help!

We have a google account where it broke our intune connection this week. We tried to unbind then rebind and we cannot because the domain already exists and the primary account was the only admin account. That account was removed as the only admin with out our knowledge. We cannot seem to get any support on this issue and this a last ditch effort for help. Please help us!!

Ever since ManagedAccountsSigninRestriction was deprecated, the new replacement settings ProfileSeparationSettings and ProfileSeparationDataMigrationSettings do not seem to have the intended effect I require.I previously had it setup so that a user with data in chrome(logged in a unmanaged profile or not) would get the option of migrating data from their existing profile into the new managed profile when signing in. It appears that does not happen.When a user goes to add a profile, they sign in using their managed profile and it simply signs them in with no offer of data migration. This was working with the now deprecated policy with the below setting Force separate profile and forbid secondary managed accounts—The managed account is the primary account. The profile has no secondary accounts. When the profile is created, importing existing browsing data is allowed. The replacement policies do not appear to work. They are applied at the browser/machine level before a user is logged in s

Hi,We run a retail fleet of Android Enterprise dedicated (COSU) devices managed by Intune, with Entra shared device mode and no Managed Home Screen. Devices are Samsung Galaxy XCover6 Pro (SM-G736B), Android 15, build G736BXXSAFYJ3, enrolled via KME, with KSP Premium, KAI and E-FOTA. All our apps are on the KSP battery optimization allowlist.This is the same environment as these two earlier threads, but the symptoms this time are different, so I'm posting it separately:"Disabled apps" (Feb 2025): https://www.androidenterprise.community/android-enterprise-general-discussions-3/disabled-apps-1156 "Intune app disabled" (May 2026): https://www.androidenterprise.community/android-enterprise-general-discussions-3/intune-app-disabled-2570What happened this time (Aug 31, ~12:00 UTC+2, one device so far):Every Intune-managed app was disabled simultaneously: Intune app, Authenticator, Remote Help, Knox Remote Help, Knox Asset Intelligence, our POS app, our own settings app. Icons were greyed out

Hello,We have some troubles in Chrome when trying to read pdf file on android. In EDGE it works perfectly. Is there someone who can explain how it works and which app (system or not) is rendering the file ? It seems that sometimes it is the device, sometimes it is the website. The behaviour also doesn’t seem to be the same in Android 16 / 17.In the Android drop last year I find : PDF in Chrome on Android: Revamp workflows with in-browser viewing of linked PDFs, which now open directly within a new Chrome tab. I’d like to attach a little video but unfortunetly it seems we can’t in the forum (or I don’t find the button :)).Steps to reproduce (I’m on a Samsung S25 in Android 17 beta)1 - Drag and drop a pdf file from the “file” app to the “EDGE Browser app”. ==> Sometimes it works, sometimes EDGE is telling it cannot access the file. ==> something not yet “production ready” ?2 - Right click on the pdf file in the “file” app and select “open with”. A window opens to propose some apps,

i got stuck with one situation and need your guidance in solving it. We have our own .apk file for android devices, these are custom in-house developed applications, i want to deploy the application to Android Fully Managed devices (Since the device belongs to company). I did it before with publishing them to google play store as a private app but now the size is the problem as it exceed 200MB, so i cannot use this option. I tried with deploying them as Line of Business application but its been 2 days nothing shows on device and even in intune portal it neither failed or success.  Question: How to deploy your custom .apk files to android fully managed devices if the file size se more than 200MB?

We use Google Chrome on Android Enterprise Fully Managed shared devices. Chrome is required for several business use cases including Chrome Custom Tabs (CCT) authentication flows and PWA/web applications.Our environment follows a shared-device model where associates check devices in and out throughout the day. While Chrome is needed for business workflows, users can sometimes reach the full Chrome browser through links opened from applications, authentication flows, PWAs, or other navigation paths.Unless I'm missing something, I have not found a supported Chrome Enterprise app configuration that allows administrators to disable or hide the Chrome address/search bar (omnibox) on Android managed devices. Current options appear to be URL allowlists and blocklists. The challenge with URL-based controls is that they can become difficult to maintain at scale. Business applications often introduce new URLs, redirects, and endpoints over time, which can create ongoing administrative overhead a

Hi i´m looking for an option to disable/clear the Advertising-ID (AD-ID) on a fully managed Device, i found the KBhttps://support.google.com/googleplay/android-developer/answer/6048248?hl=enIs there any option to remove or clear the AD-ID from EMM/MDM side without a User action? and is there any more detail information how AD-ID is working on an managed Device? Appreciate your feedbackBjoern     

Hello,We are experiencing an issue with our Android Zero-touch Enrollment account.The TD SYNNEX partner, which was previously associated with our Zero-touch account, is no longer linked. The account now appears to be owned directly by Google, with no partner associated.Could you please help us verify:Why the TD SYNNEX association was removed. The current status of our Zero-touch account. How we can re-associate a partner with the account.Thank you for your support.Kind regards,

We (the schools district I am employed by) want to block AI Mode and AI Overviews for students in our organization to prevent them from using the AI built into the Google Search Bar to cheat since they can just highlight a question “right-click” and click “search google” any question from their online school homework/quiz content, the AI Overview in the resulting tab will then provide them the answer. We have already implemented all the Enterprise policies related to GenAI and AI Mode and set them to disabled, here is a short list (for reference):GenAiDefaultSettings AIModeSettings DevToolsGenAiSettings GenAIInlineImageSettings GenAILocalFoundationalModelSettings HelpMeWriteSettings SearchContentSharingSettings SmartTabSharingSettings TabCompareSettings VoiceTypingSettings GoogleSearchSidePanelEnabled LensOverlaySettings (depreciated) LensRegionSearchEnabled (depreciated) DnsOverHttpsMode GeminiSettingsEven with all these policies in place to prevent students from accessing any GenAI f

Hi,does anyone know if there's a possibility to place a feature request to Google regarding Zero-Touch-Portal?I wanted to ask if there's plaanned at any point to provide possibility to implement AD authentication to the portal.

I am trying to make a policy in Omnissa Workspace One for Gboard. I want the keyboard to be a Slovenian QWERTZ keyboard but without changing the android system language. This is because our support needs to remote control the devices and use normal mouse an keyboard then. The employees working with the devices will use gboard and this should be in slovenian.What I need:Gboard working with sl-SL from a managed config without changing system language. My current config: