Android Enterprise General Discussions

Dear Community Members, We are currently encountering an issue with the enrollment of three recently acquired Samsung S23 devices. While we are able to successfully enroll other devices, these specific models are presenting a persistent problem. The error message displayed is as follows: "Zero-Touch Registration is not available. Check your internet connection and try again." To address this, we have attempted the following troubleshooting steps:Utilized mobile data from various carriers as well as Wi-Fi connections, yet the error persists.Formatted the devices.Completely removed the devices from the Zero-Touch portal (https://partner.android.com/zerotouch#) and subsequently re-added them.Attempted manual enrollment using the QR Code provided by Intune.Despite these efforts, the issue remains unresolved. Interestingly, we have successfully enrolled a Samsung XCover 5 without encountering any similar difficulties. We are reaching out to inquire if others in the commu

Hey! I noticed a little bug today and wanted to ask if anyone else is experiencing this. With the update to Play Store 46.1.37-31 [0] [PR] 755161904, a push message informs you that Google Play Services must be updated. With a COPE device, this only occurs in the work profile. Even if Google Play Services is updated to the latest version (25.18.33 (190400-756823100)), the message appears as soon as you open the Managed Play Store. @Lizzie Is there anything known here? The Managed Play Store works normally despite the warning in the push message. I would also have logs if required.

Learn more about the changes to the new zero-touch customer portal   The new zero-touch customer portal has been designed to make it easier for you to manage your account. Here are some of the key changes: New look and feel: The portal has been redesigned with a modern look and feel, making it easier to navigate and find the information you need. Improved navigation: The navigation menu has been simplified and reorganized, making it easier to find the pages you're looking for. Updated Terms of service: Updated the zero-touch customer terms of service and customers will be prompted to accept the terms of service upon next login to the zero-touch customer portal. The terms of service need to be accepted once by an admin or owner of the customer account. If you own multiple accounts, you might need to accept the terms of service for each one. Note: when attempting to access the zero-touch customer API. Any existing solutions leveraging the zero-touch customer APIs to access an acco

Hi everyone we received some reports from our users in the last couple of month that suddently the phone app on COPE devices (Samsung A-series) starts to show "Can't call from a personal app" - Your organisation only allows you to make calls from work apps. Workaround: Reboot the device. For most of the reports this workaround has to take place once and the message is gone forever. A very small amount of devices starts to show this message again after a couple of weeks. Rebooting is resolving the issue again. Any idea of how to prevent this? Even emergency calls are not possible if this error is appearing! Does anyone else have seen this behavior? Raised a case with Samsung today. Thanks!Daniel

We use Microsoft Intune to manage devices. For the devices which have upgraded to Android 15, the end users can no longer select Microsoft Authenticator as their default application for auto filling passwords. I cannot find any settings in Intune to allow it. All devices are fully managed corporate owned devices. The devices are all Google Pixel 8 or 8a devices. Is this a bug in 15 or am I missing something?  

I am very concerned about the Enhanced GPP features coming soon that are currently being piloted in other regions. https://security.googleblog.com/2023/10/enhanced-google-play-protect-real-time.html This is not a welcome feature whatsoever for the fully managed space where we have business apps written internally that are being installed on business devices, owned by that business. In no way do we want Google sitting in between deciding whether a very legitimate app written internally for an organization should be installed on devices that are purchased and owned by the same organization on fully managed devices. I would like a way to disable GPP completely, or at a minimum whitelist applications from scanning as we don't want Google interfering in the business operations.  GPP is a helpful consumer protection features but fully managed devices should have the ability to be opted in or out of the program. Otherwise GPP can incorrectly flag a mission critical app and

Hello all, We're facing an issue with our Intune/Managed Google Play connector. Google has deleted the account set up specifically to connect to our Managed Google Play instance in Intune. This has been an active link, with the last new device registered about 2 weeks ago and apps on devices being updated since then. We are currently unable to enroll new devices or add new apps. We are also unable to attempt to recover the account and have not been able to find a way to contact Google directly about the account issue. Barring being able to recover the account, are there ways for us to lessen the impact of creating a new account for the linkage? Or are we going to have to have all our Android BYOD users re-enroll their devices?

Updated 12th October, 2023   Current status: Fix implemented   Issue description: We've received multiple reports that some approved apps are not displayed in the Managed Play store on devices.   Latest update: Hello everyone,   Thank you for your patience and for your help to identify the problem. I've been informed by our Engineering Team that a fix has been implemented and those apps not displaying should now be visible. If you experienced this issue, please can I ask you to check if this has been resolved on your side?    Massive thanks,   Android Enterprise Customer Community Team   Previous update: Current status: Under investigationWe've received multiple reports that some approved apps are not displayed in the Managed Play store on devices.   Our Engineering Team is aware of the issue and actively working on a fix to address this. Unfortunately, they don't have an estimated time for when the issue will be resolve

Hi, We've been using a Managed Play Store Web App set to "Fullscreen" deployed to Samsung Galaxy Tabs using Knox / Intune for a couple of years now. Running in Corporate Dedicated / KIOSK mode Multi App (to have QuickSupport available as well). Recently we're seeing devices (a pattern emerges of this applying to all freshly rolled out devices, although we've seen it on ~5% of older devices as well) where the Web App doesn't open up in full screen mode anymore. No redirects are happening and all content is being loaded from the Web App URL (meaning no external calls). What should we chase next in troubleshooting?

The ability to apply a managed configuration to Gbaord has disappeared. We think this is due to a recent change to the Gboard app where Google has removed this ability.   Environment:MDM = Omnissa Workspace One UEM (we are also hearing reports of this impacting SOTI customers as well)Rugged Zebra Mobile devices, majority running either A11 or A13Leads:Managed App configs are still present on Chrome & ServiceNow Now Agent, hence why we believe this is not an MDM Console issue. We have escalated to Omnissa support anyway, who have in turn escalated to Google.Is anyone else seeing this issue?

Hi! We had problems with a few devices after enrollment today. The Managed Play Store did not work properly. Restarting and waiting seems to help. SymptomsEmpty collection in Managed Google PlaySpaceship error, because supposedly no apps were made availableInstallation commands from the UEM did not work in some casesApps assigned in UEM cannot be found in PlayI was only able to reproduce the problem in one of 3 attempts. A few automatic app installations worked for me. However, it was not possible to search for the apps manually. Restarting the device and then waiting a while seems to help. However, a colleague had a strange error in Managed Google Play after a restart when he tried to install an app manually."The item you want to buy could not be found."However, it is not a purchased app or an app with in-app purchases.  Is anyone else currently having problems with Managed Google Play? 

Have a bit of an emergency where after the latest Gboard update, when users tap an input field, instead of Gboard just showing up as normal, a menu bubble is appearing instead where they have to tap it and select the "show on screen keyboard" option.  I haven't been able to locate Google's release notes for Gboard to see if there was something that changed.  Any ideas would be greatly appreciated!

The customer reported an issue to us: on the personal part of his phones, business contacts are no longer displayed across his entire fleet when users receive SMS from business and personal contacts (only numbers appear, without contact names).By default, Samsung phones use the rich Google Messages application, as well as Textra, which are both impacted. This issue does not occur with Samsung's SMS application. We have tested on our side (Orange), and business contacts and numbers are displayed on the personal part. We have also tested with the customer, but it works randomly.Please take the necessary action.

We have a great wish to place shortcuts for specific apps on the home screen when the app is installed (or at a later point), but this doesn't seem to be possible.When we discuss this with our MDM provider (SOTI), we are told, it is a Google/Android limitation, and this seems a bit strange to me; is it really not possible to place shortcuts on the home screen to your own liking? I hope this resonates with others - or even better; that I can be corrected, and there is a smart and easy way to achieve this goal. We run all our Android devices as fully managed, if that is relevant.

Dear all,Since three weeks ago we noticed issue to deploy basic Configuration profiles (WiFi) into devices (MDM is Intune). Problem ONLY occurs with newly enrolled COPE devices running on Android 15. So we think it's Android 15 (Google) issue on COPE enrolled devices because all the other scenarios working fine:BYOD enrolled devices get WiFi profiles successfully deployed to device (Android 14/15)COPE enrolled devices get WiFi profiles successfully deployed to device (Android 14)COPE enrolled devices do NOT get WiFi profiles successfully deployed to device (Android 15)Anyone else noticed the same/similar issue with Configuration profiles with Android 15 clients? Best RegardsJarmo

Hi Everyone, sitting with an issue on three O365 tenants at the at the moment that I have escalated to Microsoft. Was hoping that someone else experienced this issue as well or can point me in the right direction. After opening the connector to bind the EMM (Intune) to the google play store the I grant Microsoft permissions to send both user and device information to Google is greyed out. I can close and the window and then reopen it and I can then tick the box. After that the Launch Google to connect now Button becomes available and the windows that pops up asks me to sign in with my google account. I have created numerous accounts, personal, work and school and tested with them. After the login into the google account it does not continue with the EMM setup. the box displays "The Page has expired. To restart your registration, please reload the page from your EMM console. Only way past that is to log out of the Gmail Account and then log in again with the same issue "The page ha

Hi everyone, As of some weeks, Intune started showing the tenant name on the lockscreen. Where it used to say "this device belongs to your organisation" it now says: " This device belongs to company name" . Since this is a big no for most of our customers, I was wondering if other people noticed this as well and maybe even found a solution for it. Microsoft support admitted that they changed this, but they will now help us getting it fixed or even giving us the option to enable or disable this.  Showing the company name on a device can make a device more interesting to people who might find a lost or stolen device. Therefore, we never show company names or logo's on the lock screen. And most customers we work with expect that kind of behaviour. We currently have to project on hold because if this detail. (And its costing us extra business because they are not buying the hardware that comes with it &#x1f605) I hope someone else is having more luck! In the m

Hello everyone,We are currently facing an issue where Google Play Protect is blocking our Android application during device provisioning.Context: - It is not distributed via Google Play (but is already published); it is hosted externally and installed during provisioning via QR code.- The app is properly signed, and provisioning works at the system level, but Play Protect blocks the app with the message “App blocked to protect your device.”- This started happening recently on new devices / factory reset devices. We have already submitted the official Play Protect appeal form as recommended in the documentation:The form was completed with all required information (APK, package name, signing certificate, use case, etc.).At this point, we are looking for guidance from the community: - How long does it usually take for the Play Protect appeal form to receive a response or decision?- Is there any additional step or channel recommended for Android Enterprise DPC apps in this s

Hi community, I'm encountering a strange issue and could use some guidance.A Google developer account released an app to Managed Google Play (so it's automatically private and not available on the public store) and entered our organization ID in the appropriate field. We can find the app on the iframe in our MDM (Microsoft Intune in this case), select it, and assign it to groups.Everything looks good: BYOD deployments (Personally-owned devices with work profiles) can install the app from the Managed Google Play store. However, COPE devices (Corporate-owned devices with work profiles) cannot search for it, and it's also not visible in the app collections we've created. Could there be a setting in the Google developer account's store listing that prevents availability for COPE devices? I've exhausted all options in Intune, including multiple store syncs, with no success.Intune is telling me, that the App is available to install on the specific COPE devices, but it doe

Dear Community Members,We are considering registering to be a Google Partner. After submitting our application, we were declined without specific reasons. Are there any instructions on Google Partner requirements that we could follow?Any help would be appreciated.

Hello everyone,   Our team is always interested to hear your insights around the current employee experience on managed Android devices and profiles (Work Profile). One specific area of focus is the application installation experience, particularly for apps installs that happen while the device is in use (not part of initial setup).   The installation experience can vary depending on a variety of factors - the device model and Android version, configuration of your EMM’s DPC client, management mode of the device (fully managed vs. Work Profile), the permissions required by the app, the source of installation, permission policies, etc.     Based on your setup, it would be fantastic to hear some of your user experiences and what improvements you’d potentially like to see?    I know this is an interesting topic for many of you, so I'm looking forward to hearing your thoughts, feedback and having a good conversation.    Massive thanks in advance

Hi, We recently moved to android enterprise with work profile (using Intune) for all of our android users. And we just found out that with android enterprise with work profile does not support wearOS yet so that our users cannot add their corporate email account (O365) to the outlook app on their samsung watch or pixel watch.we tried to contact microsoft about this and microsoft said that this is not up to Microsoft but it is up to Google Android whether they would like to support wearOS for work profile. Can Google confirm if they would like to provide some support for work profile in the future for wearOS as well? I know that any development of newly feature in android system are fully confidential but it would be good for android end users to know if Google has a plan to support this in the future or not.

Hi, is there any way to get a report in Intune to check how many of the devices I have enrolled are roaming?I was able to do so in a previous MDM (MaaS360) but I am not able to find any option in Intune.Thank you

We use managed accounts (12345678901234567890@android-for-work.gserviceaccount.com) to provide access to the Managed Playstore, this accounts are assigned to the users or devices, I would like to disable the payment method options for these accounts.  The users have no control over that account, most of the time they don't even know the name of the account. there is no password, no way to restore purchases made.When the employee's account is terminated or the device replaced, it creates a problem for purchases made.

Over the past month, we’ve noticed a significant increase in the review times for our apps that are permanently private under Managed Google Play. Previously, review times for both closed tracks and production were almost instantaneous. However, we’re now seeing delays ranging from 20 minutes to over an hour. Has anyone else experienced similar issues? Is there any known way to revert to the shorter review times we had before? It’s possible that this change coincides with our recent verification of developer accounts to meet the new requirements, but we’re unsure if that’s related.