Android Enterprise Customer Community

Hello community,We have Samsung XCover6 Pro Enterprise Edition sent to customer in May this year. (Android v.12)They have started the phone and then didn't enroll it. They have just started the phone and put it on the shelf and battery has died and now they have started the phone. There are two problems:1. They can skip to connect to the Wi-Fi2. Even if they connect to Wi-Fi the phone doesn't get enrolled, the enrollment phase never comes up, you can just continue to setup the normallyIf we remove the phone from Zero Touch Portal, hard wipe the device by connecting it to a PC and then upload it to ZTP and connect it to Wi-Fi. Then it starts with enrollment. So I wanted to test this myself. I took the exact same model of the phone Samsung XCover6 Pro Enterprise Edition from our shelf and started it and to my surprise I COULD NOT skip network connection. Now the only difference between the phone that I tested and the phone that we sent to the customer is that, we sent the phone

Hello Community,I hope you’re all doing well.Our company is using Google Zero‑Touch in combination with Microsoft Intune for managing Android Enterprise devices.One of our suppliers has informed us that they are unable to add a device we previously purchased from them to our Zero‑Touch portal. They can only add devices from new or future orders. They suggested that we contact Android Zero‑Touch support regarding this issue.This seems unusual, as other suppliers have been able to add devices from past orders without any problems.Has anyone experienced this before, or can offer guidance?Thank you,Nihad

Hello,For several weeks now, we are facing an issue in Samsung Contacts app about searching contacts in our Exchange Global Address List.This feature has worked flawlessly for many years, and now when we search for a contact in Exchange GAL, contact is found but when we try to open it Samsung Contacts app fails to open contact and shows “Contact not found”.Thank you for your help.Regards,

I have found a variety of these questions posted both here as well as across other places on the net.It seems that the requirements to apply a bulk change to devices in ZTE are very specific. I cannot find a way to make it work. I’ve tried CSV files from Excel, Google Sheets, as well as just making it in a plain text editor.Every single time the file is rejected as an unsupported file type. I would really like some clear guidance on how to make this work consistently if at all possible.Thanks.

I believe someone is using Enterprise either Android or Google to manage my phone for malicious reasons when I am not an employer. 

Hi everyone, I’m looking for guidance on an issue affecting multiple Motorola Moto G 5G (2022) devices that are currently stuck on the reboot screen and unable to boot into the system. We’ve already tried several troubleshooting steps, including performing a hard reset and attempting to clear the app cache via recovery mode. However, the usual options such as “Wipe data/factory reset” and “Clear cache” are not available. The devices only show limited options like reboot system, bootloader, and power off. Because of this, we’re unable to proceed with standard recovery or reset methods, and the devices remain unusable. Has anyone encountered a similar issue or found additional troubleshooting steps that might help resolve this? Any suggestions, especially around accessing full recovery mode or alternative recovery methods would be greatly appreciated. Thanks in advance for your help!

Hi,One of our customers has requested a change to their customer name in the Zero Touch portal. I can’t see an option to update this directly.I found a note suggesting this needs to be done by raising a support ticket, but I’m not sure where or how to do that.Could someone please point me in the right direction? Thanks in advance 🙂

I have enrolled a device and working fine but after some days when we try to access playstore it show offline mode of playstore. I have attached image for more clarification. What is the actual issue behind that.thanks in advance. 

Hello Android Enterprise Community,I am the developer of MDM solution. We are facing a critical issue with Google Play Protect (GPP) blocking our Device Policy Controller (DPC) during enrollment.Issue Description:Error message: “This app can request access to sensitive data” when installing the MDM Agent APK via QR Code provisioning on Android 16 (and some earlier versions). We have thoroughly reviewed and ensured compliance with Google’s guidelines: Warning Dev Guidance ,  Potentially Harmful Applications (PHAs) ,  Mobile Unwanted Software (MUwS) We have submitted the Play Protect Appeal multiple times (more than 4 appeals over the past 2 months) via Play Protect appeal . However, our DPC is still being blocked.Our Solution Details:Primary deployment mode: Fully Managed Device (Device Owner). Used exclusively internally within our company (On-Premise environment, no public distribution). Heavily focused on Samsung Galaxy devices - we integrate Samsung Knox SDK for additional policies

Hello, all!My team is looking at deploying a custom XML payload that will disable the user’s ability to enable Wi-Fi Sharing on their Mobile Hotspot. The setting is located here (on Android 16): Settings > Connections > Mobile Hotspot and Tethering > Mobile Hotspot > then under network name and Advanced the option to disable Wi-Fi Sharing is there.Our goal is to configure this option OFF via custom XML and not allow the user to configure it on our managed devices.Initial research showed us that the configuration parameter was:<parm name="AllowWiFiSharingViaHotspot" value="false" type="boolean" />However, testing this didn’t yield any results.I can post the full XML profile if needed, but really what I am looking for is something that may guide me to the configuration parameters that are available to MDM’s. 

Hey everyone, Security is one of those topics that never stops evolving and is always relevant. We all get regular training at work and we know that scammers and spammers are getting smarter by the day. At the same time, our phones became such a big part of our lives —  which makes protecting them (and the data they hold) more important than ever.Here in the Customer Community and at Android Enterprise, you probably already know how much we value security - so much so that we have created our own security podcast (check our latest episode of The Secure Element here)! The theft protection features can bring a real peace of mind (you can read more about those here), especially the Theft Detection Lock which uses Google AI to detect if someone snatches your phone and automatically locks the screen, keeping your data safe. Now, over to you: which Android security feature feels like a real turning point for you and why? What would you like to see in the future? Is there anything you’d like

Hi everyone,We are a new company currently integrating Android Enterprise using the Android Management API, and we are completely blocked at the onboarding stage due to quota restrictions.As per the documentation, we understand that an initial quota of up to 500 devices requires a business justification, and we have already submitted the required request form. However, we have not received any response or acknowledgment so far.At present, our project is effectively limited to 0 devices, which is preventing us from even beginning integration, testing, or validation of our solution. This is a critical blocker for us, as we are unable to move forward without basic provisioning access.We would appreciate urgent clarification on:Expected turnaround time for initial quota requests Whether there is any way to enable minimal access for development/testing while the request is under review The correct escalation path for such casesThis delay is directly impacting our project timelines and deliv

Following up on the latest episode of The Secure Element with Harsh Lal (Senior Software Engineer, Android Authentication @ Google), we’ve been digging into what passkeys actually mean for businesses — and whether they will be replacing passwords in the near future.Passkeys could be seen as the next step of passwords as they can solve several issues that we’ve all experienced with ‘traditional’ passwords like memorising (or reusing) complex credentials, phishing, storage and security issues. Passkeys also allow us to login using biometrics and bring some interesting implications for B2B and enterprise environments: Cross-device access via password managers Compatibility with enterprise systems Support for hardware tokens (e.g. FIDO keys, YubiKeys) The possibility to revoke access instantly as neededThis sounds like a win-win situation, with both better security and better user experience so could passkeys be the end of passwords? With that comes an important question: how will you get

Dear Android Enterprise Support Team, I am experiencing an issue while attempting to enroll my HONOR Magic V5 device into Microsoft Intune for device management. I just bought the device one week ago, but when I try to add a work profile, I receive the following error message:"Can't add work profile. A work profile can't be added to this HONOR Magic V5. If you have questions, contact your IT admin."This issue is preventing me from completing the enrollment process required by my organization. I have already consulted with my company’s global IT support team, and they confirmed that there is no alternative solution on our side. The only way to resolve this issue is for HONOR to make the HONOR Magic V5 compatible with the Microsoft Intune application and Android Enterprise work profile enrollment.Device Details:Model: HONOR Magic V5OS Version: Magic OS 9.0.1Android version: 15Model: MBH-N49Error Screenshot: attached as below  Could you please advise if this device supports

I downloaded the work profil but not showing on the screen on HONOR Magic V5 anyone can help    

We’re having an issue with Android Enterprise.We have registered Android Enterprise via and MDM Solution.Now when we detached our Android Enterprise on the MDM solution and enrolled on a new MDM Solution, we can no longer claim the domain and we cant even log in to Android Enterprise either.

Hi,We are experiencing an issue. We have delete our organisation from a user account linked to Sophos Central MDM. This organisation is still bound to multiple end user devices which cannot access the Google Play Store and we cannot enroll any new devices. We have the organisation ID and the user account, we are looking for a way to restore the organisation to the account. Do anyone know if it is possible to reverse what we have done and restore an organisation ID to the account?Regards, MattMc

Hello all, We're facing an issue with our Intune/Managed Google Play connector. Google has deleted the account set up specifically to connect to our Managed Google Play instance in Intune. This has been an active link, with the last new device registered about 2 weeks ago and apps on devices being updated since then. We are currently unable to enroll new devices or add new apps. We are also unable to attempt to recover the account and have not been able to find a way to contact Google directly about the account issue. Barring being able to recover the account, are there ways for us to lessen the impact of creating a new account for the linkage? Or are we going to have to have all our Android BYOD users re-enroll their devices?

Hi All, just wondering if Android Auto will work for fully-managed (COBO) Samsung devices enrolled into Intune, or COPE for that matter?  Is there anything official from Google on this?  Does anyone have any advice on getting it to work or any gotchas along the way?

Working on a large-scale deployment of Android-based devices with key requirements:• Android 14-  Google Play Store support- Compatibility with enterprise MDM platforms- Long-term lifecycle support (5 years OS patches and version upgrades) Specifically looking for guidance on the below:Is GMS certification mandatory for devices that include Google Play Store in such deployments? Is Android Enterprise essential for stable MDM integration?  For kiosk / signage use cases, is EDLA certification recommended or required? Any known challenges with 5 years OS patches and version upgrades?

One of our customers has replaced 150 devices currently in zero-touch with 150 new devices. The 150 older devices need to be removed. Is there a way to select and remove them all at once from the zero-touch portal?

Hello,I wanted to know if it is possible to access the applications installed via the Play Store through an MDM without going through the MDM.I found this link:https://play.google.com/work/licenses/appsBut it only shows which applications have been approved to be added to the MDM, and not the number of applications installed on the device fleet.Thank you for your help.Best regards,Titouan 

Our enterprise account’s primary contact has left the company, and his email is no longer valid. We are unable to update this information ourselves. We need to regain access to our company account to complete Zero Touch Enrollment for a batch of pending mobile devices.Is there a way to change the primary contact to this account? Any guidance or support would be greatly appreciated. Thank you so much!

Hi everyone,I’m encountering a persistent issue where users on MDM-managed devices (specifically Samsung devices using Knox) are unable to complete the Two-Step Verification (2FA) setup in WhatsApp.Whenever they attempt to set a PIN, they receive the following error:"Not possible to perform two-step authentication at the moment. Please try again in a few hours."After analyzing the system logs, I found strong evidence that the management policies are interrupting the authentication activities. Here are the key findings from the logs: Forced Activity Termination: The system triggers a finishIfPossible command on the 2FA activities (TwoFactorAuthActivity and SettingsTwoFactorAuthActivity) immediately after they are collected in a transition. MDM Policy Interference: The logs show ApplicationPolicy (part of the Knox management layer) checking the state of the WhatsApp package precisely during these transitions.   Input Channel Disposal: There are multiple W/InputManager-JNI warnings in

Hi all, I’m currently working on a project involving the CIS level 1 and 2 benchmarks (https://www.cisecurity.org/benchmark/google_android ). The goal is to configure this in an EMM (not choosen yet). Most of the rules listed in that PDF can be matched with an API (its hard work, wish Android had done this as they did for STIG 😂), but there is one that I can’t trace back to an API.In the Managed Google Play store there is a setting called Improve harmful app detection which they recommend to set to enabled. But I don’t want a user to be able to toggle this on or off, I need it to be forced on.  Does someone now if its even possible to configure the following via an EMM?