Android Enterprise Customer Community

We are facing a situation where users are complaining about the default Samsung Keyboard that comes with Galaxy devices as the corporate device. We are looking into providing other options such as Gboard and Swiftkey but the problem is we are unable to fully secure traffic going to these third party services.  For Gboard there are some options onthe MDM as amanaged app while Swiftkey does not have many options. Main reason we stick  with Samsung is the Knox service plugin which helps secure the device more including keyboard however it only applies to samsung keyboard. With each other keyboard we introduce we have to rely on the key value pairs that come with the app to select options we can lock down as needed. Not all the app developers are enterprise focused so its hard to get any feature requests thoguh. Only other thing I can think of is blocking traffic at a network level to ensure nothing goes through but then we would need to know the addresses that are used. Has anyo

Is there a proven method to determine why a device might be failing Play integrity verdicts? From what I can see it appears to be a black box. I'm trying to troubleshoot a BYOD device that is failing the Strong Integrity check and Device Integrity check. We've checked the device is a certified device (Samsung S23 - SM-S911B), Device has Google Play services enabled and is showing as certified in the play store. Bootloader isn't unlocked, the build seems to be an official build (UP1A.231005.007.S911BXXU3ZWJ6) also. Anyone have any experience with this? Thanks.  

I've been trying to enroll my Honor pad x9 using qr code method . But I keep getting stuck after "Getting ready for work setup"I'm new to this and don't have much idea on the topic.   

Dear Android Community,We are a trust organization and building an enterprises Mobile Application for our employees. As a part of our commitment to strengthening the integrity of our mobile application, we are exploring the possibilities of implementing a binding mechanism with following device identifiers: IMEIIMSI MAC address.This additional layer of security aims to enhance the trustworthiness of our mobile application, providing a more secure environment for our employees.However, we are facing some challenges in implementing this functionality, especially about the latest Android versions and privacy considerations. I am reaching out to seek your expertise and guidance on the best practices to fetch any of the above-mentioned methods in compliance with the Android security standards. I want to ensure that my application adheres to all the necessary permissions and privacy policies to access this sensitive information.If you have any relevant resources, code examples, or

Bonjour J'ai réinitialisé mon appareil et il affiche qu'il a été bloqué pour une reinitialisation non approuvé.Comment le débloqué.  

 A customer reached out to us, after they received an e-mail from Google regarding the account which was used for creating the managed Google Play Store binding/token in Intune. Google informed the customer this Google account was deleted due to Terms of  Service violations. Since this Google account is used for the Managed Google Play binding/token this issue has quite some impact for the customer. The customer reached out to (let’s say) Google first line support but ended up with nothing so far. Besides the e-mail notification about the account deletion the same e-mail suggests to start an account recovery wizard, but this is an dead end, since the customer ends up with: ’Google doesn't provide another way to sign in to this account’.My question is twofold:-Is there any way left to restore the account?-Is it possible to get informed what the actual Terms of Service violation of this account is/was?Thanks!@jasonbayton 

I have a 23 Outback and was wondering why the speed limit sign doesn't show on the map while just driving(no destination entered). If I'm not using Android Auto my phone shows the speed limit just driving(no destination entered).It does show when a destination is entered I'm guessing when available(but most times at least on highways).Any ideas or a suggestion to the AA developers to add it.

how do I create a company, I only see *Android Management API *on Android Enterprise I do not have access

Hi I created service account on my google could project got my public and private json keys.now i am trying to create  google.androidmanagement this is my code pleases give me an advice " const SERVICE_ACCOUNT_KEY_FILE = 'C:\\Users\\User\\Desktop\\happyIconProjects\\MDM github\\AndroidManagmentAPI\\backend\\src\\Google\\keys\\mobile-device-managment-409407-20c331616ec6.json';const SCOPES = ['https://www.googleapis.com/auth/androidmanagement'];async function createAndroidManagementClient() {    console.log(SERVICE_ACCOUNT_KEY_FILE)  const jsonContent = await fs.readFile(SERVICE_ACCOUNT_KEY_FILE, 'utf8');  const serviceAccount = JSON.parse(jsonContent);  const authClient = await auth.fromJSON(serviceAccount, SCOPES);  console.log("we passed here ")  console.log(authClient)  console.log("****************************")   const androidmanagement = google.androidmanagement({    version: 'v1',    auth: authCl

J'arrive pas à ouvrir les applications 

Hello! My apologies ahead of time if this post isn't in the correct spot. Let me start by saying that I love Android, and I'm so thankful for the community here. Situation: I work at an employer who says that they are totally okay with me using a company-owned device as my personal phone, as well.  They have set up a personal and work profile on the company-owned device.  My question... I saw this webpage here... https://support.google.com/work/android/answer/7502354?sjid=14497149945405543837-NC#zippy=%2Cmy-organization-owns-my-device Based on this article, am I understanding this correctly? ...That somehow - even on a company-owned device - the personal profile apps are not monitored? Just seems too good to be true given that it's a company-owned device.  Thank you for any clarity you can provide here. I'm not super worried, but I just don't know that I feel comfortable with my employer having full access to my password manager, m

Hello,I've almost 200 devices running my app in Kiosk mode. Recently, the upgrade of the app seems to be not performed by the devices, even if the early versions sent months ago passed throught and were successfully installed. The main configuration of the app is not changed. I'm using windowed mode to update and "always high priority" feature. What can be the issue origin? The update was sent to the store ten days ago.

I am deploying the Knox Service Plugin app and a Configuration policy through my MDM (Microsoft Intune). The app successfully installs on the device, and the policy shows as successfully applied. However the setting I am trying to configure (Screen Timeout = 5 minutes) is not configuring. If I manually open the KSP app on the device and select Apply Latest Configuration, the setting successfully gets configured. How do I make the setting configure without manual intervention?

HI, I have created COBO profile for our company and they have requested an app which requires a licence. How do I package this using intune?

Hi ,I am working on a MDM application which is a Device admin app, Now I am trying to move it to Device Owner. I used Android Management API and generated Enrolment Token. I have uploaded my APK in  S3 bucket and given that downloadable link In QR code Json.  After factory reset, I am clicking 6 times on the screen and scanning the QR code, after connecting to WIFI, it says "Device belongs to your organization" . When I click on Next button, I an getting a popup saying that "CAN"T SETUP DEVICE, CONTACT YOUR IT ADMIN FOR HELP". How to fix this. what all things I need to handle in my android code. How will my app get downloading when scanned the QR code. Here is my Json for QR code.  {"android.app.extra.PROVISIONING_DEVICE_ADMIN_COMPONENT_NAME": "com.android.client/com.android.utils.AdminReceiver","android.app.extra.PROVISIONING_DEVICE_ADMIN_PACKAGE_CHECKSUM": "checksum generated from dowloaded APK","android.app.extra.PROVISIONING_DEVICE_ADMIN_PACKAGE_DOWNLOAD_LOCATIO

Hi.I want to create a work profile but it shows an error:DevicePolicyManager: Adding a profile is restricted: User UserHandle{0} Has device owner? trueI have a device owner on my mobile and want to have a work profile simultaneously, but I get the above error.

Hello Android community! 👋I'm currently working on an Android app and I'm keen on optimizing its performance to ensure a seamless user experience across a diverse range of Android devices and versions. I'd love to hear your insights and recommendations regarding best practices, tips, and tools for achieving optimal performance. How do you tackle compatibility issues, and are there any specific strategies you employ to enhance the app's responsiveness and efficiency? Your expertise is highly valued, and I'm excited to learn from your experiences!

I am trying to find out how to access my companies Zero Touch Portal. There has been a lot of IT turnover here and as a result we no longer have access to the Zero Touch portal used to setup our Pixel phones. I do have our Android Zero Touch Customer ID, but I do not know the email associated with the account to log into the portal. How can I find out how to reset portal access?

Hi everyone, As we use the Android Enterprise service, and I find out that some functions are missing or hidden than a usual device, including these 3 functionsparental control second spacededicated hidden folder i am not sure if there are any other functions are hidden or deleted, because these are not system apps that were removed So i want to know are these not available in AE? Is there any document from Google about this? is there any other functions are hidden as well? Thank you

After going through the public docs, we have some questions about several features:APN Setting:How can I modify APN setting using Android Management API? The network configs only contain Wi-Fi and EAP settings.Disable Doze:How can I disable doze mode? There's only a doze state in display state enum.Doze Mode:In Doze mode, the system goes through the following two phases:Doze light hibernation: in this phase, the system prevents applications from accessing the network and delays their synchronization tasks and timers. Alarms and high-priority notifications can still get through.Doze Deep Hibernation: If the device remains unmoved after the light hibernation phase, the system enters deep hibernation. During this phase, the system shuts down all network access and only whitelisted applications and specific system processes can run.Scheduled Task:Is there any way to run system-level scheduled task? When apps crashed, the tasks is still alive and can be triggered on time.ADB Usage:How can I

Hi Community, Can I retrieve data directly from Android Device Policy(ADP)? Here is what I found: 1. I can receive device events from pub/sub notifications. The data flow is ADP -> Google Server -> My Server.2. In the ADP introduction, it says that: 3. In the Android Management API doc, it says that: My questions are as follows:Q1. Is there any way to make data directly back to my server(data flow: ADP -> my server)?Btw, it seems that existing EMM partners can achieve this by creating their own Device Policy Controller(DPC). Android Enterprise is no longer accepting new registrations for custom device policy controllers (DPC) using the Google Play EMM API. All new EMM solutions should now use Android Management API, which comes with its own DPC provided by Google. Q2. If Q1's answer is yes, how can I achieve this? If I develop my own app, is there any way for my app to get device data from ADP? Any help would be appreciated.

I'm currently developing an android app for my employer. I need to enroll the device for the device owner property. I tried enrolling it but the error message i get is: Can't set up work profile Your IT admin doesn't allow a work profile on this device. However i have all rights but can't find the option to enable it, or i don't know what exactly to do. Edit: I have an Samsung Galaxy Tab Active2 with Android 9 and One UI version 1.1 Appretiate every comment!

Hi Community, We're applying for EMM Community and we've got some questions. https://developers.google.com/android/work/release-solution  1. Do we have to prepare an EMM solution demo for EMM Community? Are there any feature requirements we have to fulfill? Do we have to provide our web console? Or the Google Quickstart tryout is enough?https://developers.google.com/android/management/join?hl=en  2. Besides our EMM demo, what else do we need for the application? 3. After joining the community, what if EMM partner fail to finish all the work in 180 days?https://developers.google.com/android/work/release-solution Any help would be appreciated.

Please how can you get your work place code ?????

hello my name is abhijeet i am from India , my company name is oglatech one of the leading mdm solution company in India i applied for android enterprise for multiple time but my application has redetected , i want to know which specific point i not meet in your policy  ?