Android Enterprise Customer Community

I am trying to create a web token to embed managed google play iframe, the code is given below: private static void getWebToken() throws GeneralSecurityException, IOException { WebToken webToken = getAndroidManagementClient().enterprises().webTokens().create("enterprises/LC01l28hdc",new WebToken()).execute(); System.out.println("Web Token: "+ webToken.toPrettyString()); }  but after running it, I get a 400 Bad Request  "code": 400  "reason": "badRequest"  "status": "INVALID_ARGUMENT"

Is there any way to change the default configuration for press and hold from "Wake Bixby" to "Power off menu". Trying to run a kiosk application and it's confusing for users to need to hold the side and volume down button to open the power control. Bixby is otherwise disabled so holding the side button currently does nothing in its default configuration. Samsung support has unfortunately been less than helpful, and will only lift a finger if you pay for full Knox EMM.  

If I have an Android app, can I distribute it to customers without going through the Google Play review process? This means I wouldn't need to share the app's login credentials, as it is a corporate app. I would like to integrate it with Intune in the Google Play Console so that customers can distribute it further using Intune.

I have a EMM application where I want to configure the profile with some application like Play Seppo or Zoom. 1. From EMM application I have open a application like zoom or Play seppo2. Now zoom or Play seppo need default camera [Samsung tablet camera]3. When try to open camera application throw some error log like belowNote:  Also I can't open default camera app directly with the package name but others application I can. -> How can I get camera access for EMM application for secondary user and the others application? Error: Sending non-protected broadcast com.samsung.intent.action.MDE_SUGGESTION_NOTIFY from system 1207:system/1000 pkg androidIs there any security issue to open camera or how can I use samsung default camera in EMM application ?

When is the anticipated support date for the Samsung Galaxy S25 series phones?

Hello, I have a small case I'd like to submit to the community for help please. A customer use Mobile Iron, and use Zero Touch to enroll our Android 14 products. In their DPC extras, they enabled the system apps and need to keep that way:"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED":true,"android.app.extra.PROVISIONING_ADMIN_EXTRAS_BUNDLE":{"workProfileEnabled": true,"quickStart":"true"} Now after the device is enrolled, the Work profile is filled with bunch of apps including unwanted ones like Netflix, Adobe, YT kids, ... From Mobile Iron, they want to hide/disable some apps, using "setApplicationHidden" but it doesn't work. At OEM side, we tested this API with the Test DPC and it works properly. My thinking was that as we are in COPE, and the apps that the customer wants to remove are from the Personal space, then this is not working as the MDM cannot interact with Personal space content. Does this make sense? Are there a way to hide the unwanted

I got an APK from our Digital Signage vendor Poppulo (formerly known as Four Winds Interactive) and tried to upload it as a private Google Play app through the iframe in Intune. Got this error:From reading this article Best practices for private apps, I understand package names must be globally unique which makes sense. I am guessing that some other org already uploaded the same package that I have and now they are essentially the only ones that can use it....I definitely think this is Poppulo's fault and honestly I think it's kind of wild they don't just publish this app in the Google Play Store. Especially given they are such a big company and a very popular choice for digital signage. Regardless, I am curious if anyone else has ran into this problem before and if there is any sort of workarounds. It's my first time deploying a custom app and I've only just now realized that Intune's Line-of-business (LOB) app mode that lets you upload APKs is not allowed on devices managed with

We are currently using Microsoft Intune Mobile Device management solution to manage Android mobile devices, and these devices are currently enrolled in the mode of Android Device Administrator in Microsoft Intune. Google has deprecated Android device administrator management, continues to remove management capabilities, and no longer provides fixes or improvements. Intune will be ending support for Android device administrator management on devices with access to Google Mobile Services GMS beginning December 31, 2024. Hence, we're trying to setup Android Enterprise method of enrollment in Microsoft Intune. As part of pre-requisites in Intune, it's essential to connect Microsoft Intune account to managed Google play account. As per Microsoft recommendation, we are using Microsoft Entra account to connect to Google Play. After entering the Entra account username & password, authentication is redirecting to Google sign-in page and ending with below error.Someone at ABCD

We have hundreds of frontline devices that are impacted by a change in MS-Authenticator behavior. We found that on individual devices we could change Accessibility > Advanced Settings > Time to Take Action > 10 secondsand the issue was resolved. All devices are Work Managed in WS1 UEM. Is there a way to use Custom Settings profile to set this on devices?  I also looked at possibly using a simple app to pull up the setting for the user. I have seen other apps do this type of operation. But I cannot find a way to get the information to populate for the intent. Using adb I was able to see what it called each screen in Settings but it was always generic and not specific.com.android.settings.Subsettings, com.android.settings.spa.SpaActivity.

Hi,Few of our work profile customers are facing issue accessing work profile notifications on their smart watches. This used to work before and it stopped working few weeks back. We have not done any changes to the Android Management API policies and are not sure what is causing this. Is there a specific policy setting applicable for this that we need to enable? Attached few screen shots.Thank you.

I am considering the introduction of Android Enterprise in my company and am testing the distribution of configuration policies from Intune. The enrollment profile is set to COBO (Android Enterprise corporate owned fully managed). I do not want users to log in with their personal Google accounts, so I want them to log in to apps like Google Meet with the Google Workspace account managed by the company. However, when I set the "Restrict personal accounts" policy in Intune to block, no Google accounts can be added at all. Conversely, if I disable this setting, both personal and Google Workspace accounts can be logged in. Does anyone know a solution to this?

Hi.I have tried to set up a zero-touch account, but when I log in at https://enterprise.google.com/android/zero-touch/customers, I get an error message like "Error 403. The account xxx@yyyy.zz is not authorized to see this page. Contact your administrator for access, or use another account."How can I get help with this issue? I can't see who would be "my administrator"...

Hi everyone, We’re using the Managed Google Play JavaScript API to generate a Web UI by passing the web token obtained from Enterprises.createWebToken. However, we are encountering issues when trying to use the token in the iframe.According to the documentation ( https://developers.google.com/android/work/play/emm-api/managed-play-iframe ) , all pages in the iframe should be enabled by default. But in our case, the expected functionality is not working as intended.Has anyone else facing similar issues with the web token? Are there any known limitations or recent changes that might affect this? 

Hi - we have an AR app that our customer wants to distribute to their workers as a Managed Play Store app for a device setup in kiosk mode. They are using Microsoft Intune as their MDM. The device is a Samsung Galaxy Tab S9 FE+ (Model #: SM-X616B / Chipset: Exynos) …that is on Google’s list of supported devices for ARCore.  Our app relies on Google Play services for AR (ARCore). Customer is able to find, select and install as an non-managed app. However, when they try to add under the Managed Play Store - they cannot find it (see screenshot). Finally, they noted the same issue with another MDM (IBM MaaS360). Therefore, it seems to be an issue with Google Play services for AR component/app being incompatible with Managed Play Store. Could someone from Google confirm this? 

I need help. Someone installed an AVD onto my phone and they keep deleting my storage and changing my passwords. Also turned off my networks so I missed very important calls. Could someone help me to remove this and let me know how to stop this going forward. Thank you for your time. Greg

Hello, I was looking into options for internal use on how to manage enterprise devices and the documentation seems to point to the android management API. What was not very clear to me:Is there any pricing model documented for using the API ? As mentioned, it would be for internal useDoes this require to be registered as an EMM provider, even if it would be used internallyAppreciate any inputs, thanks!

Hello Everyone, I'm trying to determine if I have a config issue, or a device issue with a Zero Touch Configuration. My configuration for DPC extras is as follows.{ "android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED":false, "android.app.extra.PROVISIONING_LOCALE":"en_GB", "android.app.extra.PROVISIONING_USE_MOBILE_DATA":true, "android.app.extra.PROVISIONING_ADMIN_EXTRAS_BUNDLE":{ "com.google.android.apps.work.clouddpc.EXTRA_ENROLLMENT_TOKEN": "TOKEN" } } So this works to the point that the language is being set and the enrolment token is being applied to the device. However the two config lines where there is a true\false option don't seam to be applying or working in the way I would expect. When the device is reset it always asks for the WiFi connection even when mobile data is present.And after enrolment all the system apps are installed.The device in questions is a Samsung A15 Two initial questions; - Is there anything wrong with this config?

Hello everyone,Since more or less a month, lot of people in our company are getting "can't install app" error from play store, the common case is just after enrolled the device try to install all auto apps from mdm but sadly get this error for the most of apps... some device just move on and install after some minutes, others stay with the error and never install the apps.We got other cases where people can't install the app from play store with no reason.It happens on COPE devices but on fully managed too. Any idea of what's happening here? 

Following the docs https://developers.google.com/android/management/policies/dedicated-devices to setup a KIOSK policy, but result in this error. 

Several users are reporting that they are unable to register devices with Intune via ZTE.  They get the not-very-helpful "Can't set up device" message.  Is ZTE broken now?  Any others seeing this issue?  Our ZTE config for Intune has not been modified. Thanks! Bill

I have an Android application that I want to use on TELPO devices, but in a way that updates are downloaded silently on the device, meaning the user does not have to intervene to update or install an application. I understand that with the configurations offered by Android Enterprise, it is possible to set up a device to allow the actions I require.

Hi everyone!We're building a new Android EMM solution. Our product already supports on-prem and we'd like to do the same for our users who want to manage Android.I have a few questions regarding the Google Cloud project required for using the Android Management API. Specifically, I couldn’t find documentation on this topic and would appreciate your insights on best practices.1. Google Cloud projects for on-prem customers: Should our on-prem customers create their own Google Cloud projects for managing Android devices?2. Quota limitations: Given that customers with more than 500 devices may encounter limitations as described here: Android Management API quotas, should they request an increased limit directly, or can we, as a validated EMM solution listed in the directory, do this on their behalf?3. Waiting time: What is the usual waiting time for a request to increase the quota limit?Thanks,Marko

Our ZTE partner Motorola has created a Zero touch account for our company, but when we try to access the portal (https://enterprise.google.com/android/zero-touch/customers)  we get an error 403 that we do not have access. Also when accesing the "Manage zero-touch devices" setting inside the "Enrollment" sub-menu we get an server error. We already had a ticket with them and we went through the sttings tigether, but we didn't find the underlying issue and the reseller suggested we contact Android Enterprise support. We also checked that the email address was the correct one, and we also got an email from the android provisioning service that "Motorola has created your zero-touch enrollment account"  

Can we restrict use of mobile network and only allow use of WIfi using android management APi policy

Hello I currently have one client with 1000+ devices. Sometimes, there is need to deregister sopme devices (for example when they are send to repair). Is there any faster way to mass deregister devices from ZTP than searching them one by one? I mean, sometimes it is 50, or even 100. Do I have to search each device individually one by one, or is there any automated option to do it?