Android Enterprise Customer Community

I submitted my application for Android Enterprise Mobile Management for my company, but it was rejected. Please help me understand the reasons for this rejection, or assist me in obtaining approval. Alternatively, let me know the requirements for that. 

Is anybody having issues onboarding devices into their EMM? We are getting a lot of issues where devices are getting stuck at "Updating device" (see picture below), and it has been like that since approximately Jan. 27 2025. Behavior looks similar to the current report that was recently sent and that announces a fix for the issue but we are still experiencing it on our end. "Customers may experience device provisioning failures for devices managed using the Android Management API. This outage only affects devices with a policy that includes apps with ‘installType=REQUIRED_FOR_SETUP’ in the APAC region. Affected devices will stall at the ‘Install work apps’ screen, with a continuously spinning progress indicator. The Android Enterprise team is aware of the issue and a fix was released to resolve the issue as of 18:00 GMT 31 Jan 2025."

Hello everyone,In the last few days, we have noticed that when a device is set up via ZeroTouch and the restore function is used from an old device, we receive a message that the device has not been set up properly and that it will automatically reset itself in 2 hours. This only occurs if the restore function is used before connecting to the WLAN. There you can scan a QR code with the old device so that the data is transferred. The set-up process then also runs through so far, only the device is then automatically deleted after 2 hours.If you do not use the restore function that is displayed at the beginning and you use the restore function at the end of the setup process, the error does not occur.Is this a known problem or should the error not actually occur?The latest Android 14 version is used on the devices. The MDM system used is intune.

I would like to know if there is a way to keep the mobile data always on / turned off, as we are receiving requests from our customers stating "the users should never turn off their mobile data". They want their user's device to be connected with MDM all the time. 

Hi all,we have many Motorola with Android 14 and the follow wifi configuration:EAP method: TLSCertificate CA: trusted certificate from our Microsoft CA serverdomain: the FQDN of the CA serveruser certificate: the user certificateidentity: the user identity With this configuration the wifi connection failed the authenticationIn the past, we used TOFU (trust on first use) or "not validate" option instead of the Certificate CA and it worked, but now the "not validate" is no more available and TOFU no longer works Is there a way to fix the issue? 

So we usually setup AFW devices for our staff for their own use. Now there is a scenario where we have 2 members of a team with rotating shifts that fill 1 role. We would need to configure the same phone for both users, but we don't want their Microsoft account/apps to get mixed together or exposed to the other. Is there any configuration to do so?

Hello. I found this forum while doing research on the internet, I hope I'm posting in the right place, I'm not very familiar with forum culture. 2 days ago, we bought a second-hand phone for my nephew to play games. The phone arrived and I was setting it up. While creating a new Gmail account, it directed me to the verification page and asked for SMS confirmation. There is no SIM card in the phone and it's setting up for the first time? I couldn't figure out how to overcome this situation and what I need to do. Can you help?

Why I havn't got cutout option on my instagram?

Hello, I have a problem with communication with Google services because some FQDNs from Google are blocked. The problem is during downloading applications from Google Play... there are still pending downloading. Could you please share with me the correct FQDNs that should be allowed for working communication? We use: Zebra/Honeywell scanner + Intune Enrollment + Zscaler At this moment we have exclusion for this purpose:*.ggpht.com*.gstatic.com*.gvt1.com*.gvt2.com*.gvt3.com*.mtalk.google.com*.time.google.com108.177.104.188142.250.115.188142.250.145.188172.217.218.188173.194.65.188android.clients.google.comandroid.comchromiumdash.appspot.comconnectivitycheck.android.comconnectivitycheck.gstatic.comdl-ssl.google.comdl.google.comgoogle-analytics.comgoogle.comgoogleusercontent.complay.google.com and ports: httpsntpquictcp-high-portstcp5228-5230udp-123 Please help us 🙂 

Hi all, Been dealing with this issue for Android devices. We're implementing EAP-TLS for an enterprise wifi. Devices are connected to the network. But one thing that brought attention to us is how the android devices keeps on re-enabling the auto connect setting on a device level. That means, devices will auto join the network even without user's consent. We tried using the built-in template in intune but the option there for Connect automatically is not given. We pulled the diagnostics logs from company portal app and we can see that the wifi profile is actually set to <connectionMode>manual</connectionMode>.  We also tried creating a custom wifi profile, uploaded the xml with <connectionMode>manual</connectionMode> but the device keeps re-enabling the auto connect setting.  I'm 100% sure this is not an intune issue because the profiles are pulled down with the correct parameters to set connection mode to manual but

Dear all,Since three weeks ago we noticed issue to deploy basic Configuration profiles (WiFi) into devices (MDM is Intune). Problem ONLY occurs with newly enrolled COPE devices running on Android 15. So we think it's Android 15 (Google) issue on COPE enrolled devices because all the other scenarios working fine:BYOD enrolled devices get WiFi profiles successfully deployed to device (Android 14/15)COPE enrolled devices get WiFi profiles successfully deployed to device (Android 14)COPE enrolled devices do NOT get WiFi profiles successfully deployed to device (Android 15)Anyone else noticed the same/similar issue with Configuration profiles with Android 15 clients? Best RegardsJarmo

We need to know if its possible to enrollment devices like galaxy watch 7 / 6 or any other watch device with Wear OS with zero touch solution,  to use MDM solution like Knox Manage or other. Tha main questions is zero touch support Wear OS to made enrollment?

I'm hoping someone can help, as I'm at a complete loss. I am the sole owner and operator for my newly formed design company, bought a new Moto G Play and created a new email for it. After some fiddling, though, I saw that it had Moto Device Management installed already, but asks for a code from my administrator... Again, it's only me and everything is brand new, but even Google won't let me sign up for an enterprise account, saying to talk to my admin. I've factory reset, yet the problem persists and strange apps/functions are happening with the phone, as if someone else is "managing" my company device already. I've scoured forums, FAQs and articles to no avail; in fact, learning of the capabilities, I'm quite worried. Luckily, I noticed it before putting anything besides that new email on it, but it's obviously compromised by someone else - there are many, many system apps now on it that aren't from the play store, nor came with the phone initially. What can I do? Any help is app

Hello, I have a client who would like to deploy applications while hiding them directly from the Google Play Store. The customer is on the EMM solution "Ivanti Neurons for MDM (formerly MobileIron Cloud)Ivanti has made an option available to hide applications but this only allows applications to be hidden on Ivanti's own application store (and not on the Google Play Store). Do you know if there is an option outside of the EMM console (e.g. via play.google.com/work) to deploy an app to a user but while hiding it on the client's private Google Play Store ?

I have an app that I designed private for my company .... which gets permissions imei android ID block the use of factory restore unlock OEM unlock lock and unlock screen kiosk mode , and I install it by adb command and work perfect with all devices I have more than 170 devices made in this way and takes a lot of time , I would like to provision my app and placed as device owner through the QR the problem is that I do not know how to do it correctly try many things I saw on the internet , like for example the signed app get the sha256 from the apk and pass it to base64 make the json but I don't understand if I have to configure something else in the app for the provisioning I tried to scan a generated qr with everything correct and it didn't work it says contact your IT support for more information if someone can guide me it would be great, android 12+a friend sent me some java and kt files for provisioning that worked for him, but for my app it doesn't work.my app has no icon because

Hi all and thanks for your help in advance We purchased new Samsung devices from our reseller and the devices showed up in ZT, I removed the Enterprise default profile and setup few custom profiles (Microsoft Intune). and I set one of the custom profiles to be set as the default profile for new devices. The issue is that the device we purchased got assigned "Enterprise Default Profile" by default which already been removed!Is there any way to force new devices no to get the "Enterprise Default Profile" by default? the profile already gone

Hi i´m looking for an option to disable/clear the Advertising-ID (AD-ID) on a fully managed Device, i found the KBhttps://support.google.com/googleplay/android-developer/answer/6048248?hl=enIs there any option to remove or clear the AD-ID from EMM/MDM side without a User action? and is there any more detail information how AD-ID is working on an managed Device? Appreciate your feedbackBjoern     

I work in a large organization where many systems and configurations were established before I took over my current role. Currently, I am working on integrating Microsoft Intune as our Mobile Management Solution (MMS) for 300+ Android devices. These devices will be configured in Kiosk mode and will not have individual user assignments.While managing applications in the embedded Google Play Store (iFrame) within Intune, I am unable to view applications shared with our organization’s Google Organization ID. The integration between Intune and Google Play appears to have already been completed, but I do not have access to the account associated with this setup.I suspect the issue might be related to one of the following:My account is not added under the Google Organization ID.There is a missing connection or configuration preventing proper access.Has anyone encountered a similar issue? If so, I would appreciate any insights or guidance on resolving this.

Hi everyone, I just want to share the current situation we are leaving in my company and that could be interesting for other Android customers as well. With the Android security update released in May 2023, Google has changed some requirements to connect on a corporate Wifi. The "domain" value has now to be filled in the Wifi profile that is pushed on the device, otherwise the profile will not install on the device and the wifi connection will fail: https://developer.android.com/guide/topics/connectivity/wifi-suggest  "The framework enforces security requirements on TLS-based Enterprise suggestions (EAP-TLS, EAP-TTLS, and EAP-PEAP); suggestions to such networks must set a Root CA certificate and a server domain name." This change was not communicated to our EMM vendor or to us and we started to have a lot of device that were impacted. Moreover our EMM vendor was not supporting this additional parameter in the console UI and we are in the way to upgrad

Does anyone know of any Android phones or tablets that have a magnetic stripe card reader built into it?

To the Esteemed Android Developer Community,I am seeking your expert advice to understand whether my task is feasible on the Android platform. I aim to implement the following functionality:Task Description:Objective:I want to create an Android app that plays a pre-recorded voice message during a phone call.The app will:Automatically answer an incoming call when it is ON.Play a pre-recorded audio file stored on the user's phone (recorded by the user).Audio Content: “I am busy right now, call back after some time.”Disconnect the call after playing the message.Usage Scenario:This feature will be used only when the app is ON.It is intended for times when the user is busy and wants to inform the caller without manually attending the call.Key Requirements:Detect and answer incoming calls automatically.Play the recorded voice message to the caller.Ensure the caller hears the message clearly on their end.Disconnect the call programmatically after the message is played.Questions for the Commun

In Kiosk Mode on the Samsung Galaxy Active 5 tablet, holding the side button currently activates Bixby, even though Bixby has been disabled. The expected behavior is for holding the side button to open the Power Off menu, as it does in normal usage. Are there any settings or configurations that can bypass this behavior and allow the side button to open the Power Off menu directly while in Kiosk Mode?

Hello, I am utilizing the QR provisioning method to install an APK that utilizes the DeviceAdminReceive subclass. I was able to get it working on Android 10 tablets, but now I am running into the "Can't set up device \n Contact your IT admin for help" issue for Android 13 tablets. I am using the same payload for both Android versions. My current payload looks something like this:{"android.app.extra.PROVISIONING_DEVICE_ADMIN_COMPONENT_NAME": "com.example/.DeviceAdminReceiver", "android.app.extra.PROVISIONING_DEVICE_ADMIN_PACKAGE_CHECKSUM": "<checksum>", "android.app.extra.PROVISIONING_DEVICE_ADMIN_PACKAGE_DOWNLOAD_LOCATION": "<s3-bucket-url>", "android.app.extra.PROVISIONING_SKIP_ENCRYPTION": false,"android.app.extra.PROVISIONING_WIFI_SSID": "<ssid>","android.app.extra.PROVISIONING_WIFI_PASSWORD": "<password>", "android.app.extra.PROVISIONING_WIFI_SECURITY_TYPE": "WPA" }I have looked through this forum and have attempted to add the additional fields below (t

I have an managed app on one Google Play Organization account, and want to transfer the app to a second Organization account. Is that possible? 

We're running into a wall with the Playstore verification.  Got the DUNS OK, email is OK, phone number is not. The main number we need to list is the corporate #. This is an IVR.  Which Google seems to get stuck on - it cannot dial extentions it seems (not permitted in the data entry field), so no verification. Reached out to support, who basically said "we can't help". Beyond putting in some discarded number, how does one get an actual company number into this field?  I'm all for transparency, etc. but the way this is implemented is just... crazy. J