Android Enterprise Customer Community

Hello everyone,   I'm a big fan of surveys and we haven't had one for a little while - so here we are!   We'd love to hear your feedback on a potential improvement to the Android Enterprise logs.    Android Enterprise logs provide critical insights into device activity and security, empowering organizations to manage and secure their mobile ecosystems effectively. These logs are divided into: Security logs, which capture key events like app installations, failed authentications, and policy changes, and  Network event logs, which track network activities such as app connections and destinations.    Logs are currently stored in the normal world (REE - Rich Execution Environment). We are exploring a feature enhancement to enable this storage in a secure environment (Virtual Machine) so that they are better protected.    This feature enhancement has a few options / levels and we want to understand their importance to you:   Logs stored

Hi, is there any way to get a report in Intune to check how many of the devices I have enrolled are roaming?I was able to do so in a previous MDM (MaaS360) but I am not able to find any option in Intune.Thank you

I have integrated zero touch iframe in my emm console and able to link zero touch customer account succesfully.My query is after linking the customer account and set configuration  how to set policy to these devices like app push and system settings configuration through  my emm console. Thanks in advance.

Hi everyone, We’re facing an issue where managed Android devices get stuck, preventing app installations when an app included in a policy is delisted from the Play Store. For example, we had the package “com.Xplayer” in a device policy, but when calling Products: get, it returned: “googleapi: Error 404: No product was found for the given ID., notFound.” However, this app was available earlier, and despite its removal, using the Devices: update API still updates the policy without any error or warning. Additionally, there’s a possibility that an app is present on the Play Store when it is approved and added to the policy but later gets removed or delisted by Google. This could lead to installation failures and devices getting stuck. Has anyone encountered this before?How can we prevent devices from getting stuck when an app is delisted?Does EMM automatically remove such apps from policies, or do we need to handle it manually by checking each package ID?Is t

I created an enrollment token for an enterprise for work profile, and I ensured thatsetAllowPersonalUsage("PERSONAL_USAGE_ALLOWED"); was set for the token.  How ever when I try to join from my android 11(tecno) and android 14(google pixel 7) device with work profile via the ADP app, I get :Can't add work ProfileA work profile can't be added to this Pixel. If you have questions, contact your IT admin. However from my emulator device running Android 15, I could join the enterprise using work profile.

Hello, after creating an admin account and assigned to Zero Touch Portal, I get Error 403 (Permission denied). My admin account has been associated to a Google Account but still getting Error 403. Any idea how to resolve this issue. Thanks in advance.    

I would like to configure an Enterprise WiFi network for the user of my app.When I manually configure the network via the settings app, I choose "Use System Certificates" as CA certificate and set the domain to "".How can I set this option using WifiEnterpriseConfig?   Got "Enterprise configuration mandates server certificate but validation is not enabled." error without specify a list of X.509 certificates.val suggestions = ArrayList<WifiNetworkSuggestion>() // WPA2 configuration val wificonfig = WifiEnterpriseConfig(); wificonfig.eapMethod = WifiEnterpriseConfig.Eap.PEAP wificonfig.phase2Method = WifiEnterpriseConfig.Phase2.MSCHAPV2 //wificonfig.caCertificates = ?? wificonfig.identity = binding.txtUserid.text.toString() wificonfig.password = binding.txtPassword.text.toString() wificonfig.domainSuffixMatch = "test.com" try { suggestions.add( WifiNetworkSuggestion.Builder() .setSsid("test") .setWpa2EnterpriseConfig(wificonfig) .setMacRandomizationSetting(RA

Hi Team, I have a couple of devices that I could add in the Zero Touch Reseller Portal; however, the device doesn't take ZT. I have other devices in the same ZT account, and it works fine. Any suggestions??

I am developing an MDM (Mobile Device Management) application and need to manage pinned shortcuts programmatically as a Device Owner.Currently, I can add, update, and remove pinned shortcuts only with user interaction using ShortcutManager. However, I need to perform these operations silently (without user confirmation) since my app runs as a Device Owner.I checked the Device Policy API and Android Management API, but I couldn’t find any specific policy or method for managing pinned shortcuts as a Device Owner.  I attempted to use ShortcutManager#requestPinShortcut(), but it still requires user confirmation. I reviewed the Android Enterprise Documentation  but found no mention of pinned shortcuts management for Device Owners. Is there any hidden API or specific Device Policy setting that allows a Device Owner to manage pinned shortcuts without user interaction? If not, is there any alternative approach to achieving this functionality programmatically?

Hello everyone, I’m researching the implementation of Sidelink in 5G NR, particularly in commercial terminals or industrial modules that have already tested this functionality in real-world environments. We know that 3GPP introduced Sidelink in Release 16, with enhancements in R17 and R18, but so far, most deployments seem to focus on vehicles (V2X), industrial IoT, and private networks. I’m interested in learning whether there are pilot projects or tests with smartphones, IoT modules, or industrial devices that have activated Sidelink in scenarios such as:- Direct communication (D2D) without a mobile network- Coverage extension via Sidelink Relay- Support for positioning in private networks (RTT, OTDOA, AoA/AoD) (SideLink enhancement) So far, I have identified some modems supporting Sidelink, such as Qualcomm Snapdragon X65/X70, Mediatek Dimensity 9200, and Autotalks V2X, but it is unclear whether any commercial 5G terminals or modules have effectively implemented this

I have a customer as follows: EMM is IntuneEMM Bind account is a standard Gmail account, but uses their corporate email domain.  This Gmail account was setup before they became a Google Workspace customerThey now also use GWS for ChromeOS managementIf I try to add a Google Managed Play admin using their corporate email domain, then I get a message telling me that G-Suite accounts can not be used. How do we migrate their existing @corporatedomain.com Bind account to a GWS account so that it can be properly managed?

The customer reported an issue to us: on the personal part of his phones, business contacts are no longer displayed across his entire fleet when users receive SMS from business and personal contacts (only numbers appear, without contact names).By default, Samsung phones use the rich Google Messages application, as well as Textra, which are both impacted. This issue does not occur with Samsung's SMS application. We have tested on our side (Orange), and business contacts and numbers are displayed on the personal part. We have also tested with the customer, but it works randomly.Please take the necessary action.

Hello,We are observing a problem: several devices are no longer registered in ZeroTouch, as if someone had manually deleted them.Would it be possible to trace the origin of these deletions and identify who performed this action in ZeroTouch ?Thank you for your help.Hilaire

I develop a Custom DPC application for fully managed devices, and I am planning to configure global proxy settings for Android devices through our EMM Console. I want to restrict disabling these proxy settings, but I am unsure how to implement this restriction. I have reviewed the UserManager and DevicePolicyManager documentation but could not find any specific settings or policies to prevent users from modifying or disabling proxy configurations. Would anyone happen to know how to implement the restrictions that would prevent users from disabling proxy settings on fully managed Android devices? Thank you in advance for your help.

I accidentally locked myself out of my Samsung 24 Ultra cell phone I just bought last September. I have been told, even by Samsung CEO Rep, they can't get me back in my phone so I can use what I paid for. I sent an email to the head CEO of Google and got no response. Great customer service there, Bud. I know the FBI and other law enforcement agencies get in people's phones after they're dead or if it's some criminal's phone. I'm looking for a company I can hire, or an individual I can hire, to get my irreplaceable information off this phone along with all my gallery. I absolutely will not factory reset this phone and lose all my precious data. I would be very grateful for any suggestions. Thank you. A customer service toll free number or phone number for Android would also be nice.

Is it possible to have a system service in factory image that acts as an MDM client on device and communicates to a MDM server. Can the device be still GMS certified? Or do we need to use Android Enterprise APIs to get the GMS certification? 

Hi,I am currently using android phone(galaxy note 8, android 9) to enroll company portal. Before 01/2025, my company was Western Digital, and I could use company portal including bunch of android apps such as outlook. However, my company was separated to Sandisk, and I cannot use company portal after that. Is there any opinion why my phone cannot install company portal?When I try to use Microsoft intune, it always stops at the last stage of setting work profile. It says the device setting should be changed except the information; which device setting I should change to be fit for the company portal. Please give me any advice to make me available to use company portal.Or did android stopped supporting google enterprise old phones just like mine?

If you didn't see my other post Private app package name already in use I've asked one of our software vendors to make one of their private apps available to my organization. To prepare for that, I went to gather our organization ID and noticed that it's different depending on where I look. From the Managed Google Play Console:https://play.google.com/work/adminsettingsFrom the Managed Google Play iframe in Microsoft Intune:I know it doesn't mean much with the IDs blacked out but just wanted to show you where exactly I was looking. In the first instance, I'm logged into the same Google account I used to connect Intune with Google Play. Any ideas why the organization IDs would be different? I am wondering which ID to give them. Thanks.

Hello everyone, We recently received a notification from Google Play stating that our private app, which is only deployed within our organization on professional devices with our MDM, is not compliant with their policies.The message we received is as follows: Action Required: Your app is not compliant with Google Play Policies The funny thing is, we have the same app deployed on another Google Developer account, only the package name is different and this one has not been flagged by Google.We are puzzled by this as our app is only shared on professional devices within our organization.We do not distribute it publicly and we never know if we really need to take action when we receive this type of alert. Has anyone else faced a similar issue?Why would Google Play randomly flag and potentially remove our app?Any insights or advice on how to resolve this would be greatly appreciated. Thank you!

Please how can I get the location of a device after putting the device to lost mode using the Android Management API. Thank you.

AT&T enrolled us for Zero touch and provided us a Customer ID, is this the Customer ID we need to give every reseller?  We gave CDW our google account which it's what AT&T requested and now CDW provided us with another customer ID.  We do see both resellers but we have to switch back and forth between resellers and have to add every configuration to each reseller. Is this by default?  We are about to add multiple more resellers and would be nice if we can see all devices/resellers into on tap. Thank you

I have a work profile and I have company apps installed from intune.I also have 'personal' apps in the Work profile. These were added by me using the Work profile version of the Google Play store. As a result, I have work and non-work apps co-existing in the Work profile.My question is if my Employer can see those non-work apps and the app data which are in the Work profile? 

Our company change there name. Now we need to edit these informations in the zero touch portal. From the settings in the zero touch portal its not possible to edit it. My reseller also wont do a action for it. Can someone of you tell me if i can open a ticket for it or contact responsible enterprise team for it? For now i dont find any ticket creation area or contact address. Very much thanks in advance. BR,Nils

When I use the Android Management API to delete a device from an enterprise, the device is deleted but the physical device is not wiped, I can still see that the Physical device is connected to the enterprise from the device it self. The device is in fully managed mood. I want to ask if this is the normal behavior, because I'm expecting that when I delete a device from an enterprise with  AMA API, the physical device should be cleared and factory resetted?

I am trying to create a web token to embed managed google play iframe, the code is given below: private static void getWebToken() throws GeneralSecurityException, IOException { WebToken webToken = getAndroidManagementClient().enterprises().webTokens().create("enterprises/LC01l28hdc",new WebToken()).execute(); System.out.println("Web Token: "+ webToken.toPrettyString()); }  but after running it, I get a 400 Bad Request  "code": 400  "reason": "badRequest"  "status": "INVALID_ARGUMENT"