Android Enterprise General Discussions

I have raised a support case by following feature request “Clarification Regarding Deprecated Feature 4.7 in EMM Technical Requirements 2025DescriptionDear Team,While reviewing the EMM Technical Requirements 2025 document, I noticed that Feature 4.7 is listed as a required item. However, it is also marked as “(DEPRECATED)” beside the feature description.Could you please clarify whether this feature still needs to be implemented for compliance, or if it is no longer mandatory due to its deprecated status?Your guidance on this matter would be highly appreciated.”but partner support team finished my case and said Private Community Question. What is the reason behind?

We use Microsoft Intune to manage devices. For the devices which have upgraded to Android 15, the end users can no longer select Microsoft Authenticator as their default application for auto filling passwords. I cannot find any settings in Intune to allow it. All devices are fully managed corporate owned devices. The devices are all Google Pixel 8 or 8a devices. Is this a bug in 15 or am I missing something?  

OverviewWe are a Microsoft-certified and Google-certified partner providing enterprise mobility management support. We are reporting a reproducible Android Enterprise enrollment failure on Xiaomi Redmi 12C (HyperOS 1.0.16.0.UCVMIXM) that affects both Zero-touch enrollment and QR code-based fully managed provisioning with Microsoft Intune.This issue was first observed on MIUI 14 and has persisted through the subsequent HyperOS 1 upgrade without any improvement. We are therefore treating this as a device-specific issue on certain Xiaomi models, rather than a problem introduced by HyperOS specifically.We have already reported this issue to both Microsoft and Xiaomi. Despite more than six months having passed, neither party has made meaningful progress toward a resolution. Both Microsoft Intune and the Redmi 12C remain listed in the AER directory as compatible, and enterprise customers continue to purchase and deploy this combination based on that listing. We are therefore bringing this is

Hello,We have set up at our MDM solution(Microsoft Intune) a Corporate-owned dedicated profile and configured it to use only specific Mobile APN. We want to allow access from this APN to Google Enterprise Destinations Hosts. I found the below article, Android Enterprise Network Requirements - Android Enterprise Help.However the Network Team which manages this APN, requires IPs instead of host names(FQDN). Then, I read the end of the article which says “If you need to allow traffic based on IP, you should allow your firewall to accept outgoing connections to all addresses contained in the IP blocks listed in Google's ASN of 15169 listed here.”I have 2 questions: Are all these IPs(some not Google as per description) needed; Do the ports remain the same, TCP 443, TCP,UDP 5228-5230 What about time.google.com which requires UDP 123;I understand that these IPs are not static and may be changed. Thank you. 

Hey guyswe have around 1500 Samsung devices and manage them with Intune. Previously we didn’t had a license for E-Fota but we bought it and want to configure it for all devices.Also we have Managed Homescreen configured for having the Kiosk Mode. Everything is working when we reset a device and install it new. E-Fota gets installed and registered, but for the already configured devices we are not able to register E-Fota automatically. We already placed E-Fota on the Kiosk Screen, but that doesn’t help. When i click on it the device get’s registered in 10 Seconds without accepting something.Does any of you have a good advice what we could do to have the devices registered automatically? Many thank for your helpBest regards,Marc

Hi, we have a few Zebra devices registered for zero-touch and plan to use zero-touch for all regular mobile devices. the registration and all existing accounts linked to it was created by team members that are unfortunately no longer with us.i do have access to one account with administrator permissions but the account with the "owner" permission was not handed over and credentials are basically lost. which steps are necessary to recover ownership?

Hello,We are a team developing an EMM solution and currently going through the Android Enterprise EMM Partner certification process.We have completed the vast majority of the certification journey: all required certificates, documentation and case studies have been prepared and submitted, training modules are completed, and the relevant scenarios have been successfully validated on our test devices. The process advanced all the way to the final Product Excellence review, where nearly every item was fulfilled and only a single requirement remained. For that last item we received an approval at one point, and roughly an hour later received a rejection on the very same item. Following that, we addressed the rejection with the necessary adjustments and shared the full details through Partner Portal support tickets.For the past ~1.5 months we have been unable to get a response on the support tickets we've opened through the Partner Portal regarding this. The tickets have been moved to "Fini

Hello everyone,We are currently facing an issue where Google Play Protect is blocking our Android application during device provisioning.Context: - It is not distributed via Google Play (but is already published); it is hosted externally and installed during provisioning via QR code.- The app is properly signed, and provisioning works at the system level, but Play Protect blocks the app with the message “App blocked to protect your device.”- This started happening recently on new devices / factory reset devices. We have already submitted the official Play Protect appeal form as recommended in the documentation:The form was completed with all required information (APK, package name, signing certificate, use case, etc.).At this point, we are looking for guidance from the community: - How long does it usually take for the Play Protect appeal form to receive a response or decision?- Is there any additional step or channel recommended for Android Enterprise DPC apps in this s

e operate ~3000 Samsung Galaxy XCover Pro 2 devices (SM-G736B) running Android 16 (BP2A.250605.031.A3, security patch G736BXXSBGZC1) in Fully Managed Device Owner mode via Microsoft Intune. Devices are deployed in retail stores using Microsoft Managed Home Screen with Azure AD Shared Device Mode for store associate sign-in.Sporadically, individual devices have started prompting end users to set a device screen lock credential, even though no Intune compliance policy or DPC-driven password policy requires one. Investigation of dumpstate logs shows that the SetNewPasswordActivity is launched by com.google.android.gms (specifically the auth.managed component, based on activity registration com.google.android.gms.auth.managed.ui.SetNewPasswordActivity):  2026-04-27 18:28:32.812 SetNewPasswordActivity: com.google.android.gms2026-04-27 18:29:09.141 SaveAndFinishWorker: com.android.settings, ComponentInfo{com.android.settings/com.samsung.android.settings.biometrics.BiometricsChooseLockGeneric

First, do Android support using Fido2 keys on Android?Yes, it does support both using bluetooth, NFC and USB authentication.For reference: https://developers.google.com/identity/fido/android/native-apps But does it mean that it is straight forward to use it in a enterprise environment without hiccups?No, the support lacks many features that both Windows and iOS has supported for long time. If I buy a modern Fido2 with OTP support, will it work straight out of the box for using the USB?No, you need to disable the OTP support first. Here is how you can do that from yubikey manager, this works for Yubikey.Other vendors might have something similar. But for Fido2 keys without OTP support, it should work out of the box for USB-C, like Google titan.  Why this happens, dont know.Can we use NFC for Entra ID authentication like we can on Windows and iOS?No. Android does not currently support CTAP2 for NFC, only for USB-C input. CTAP1 (FIDO U2F) supports certificate based authenti

when setup the devices offline, they receive notifications with reset after 2Hours, for Samsung devices, Are we able to create DPC templet to let the devices reset after 10 Minutes or to customize this based on the need. 

Yes, I am operating as a registered business. I have a valid Udyam registration. Currently, I am managing around 10 Android devices for business operations, and I am planning to scale this further. I am looking for a proper enterprise setup with centralized device management and Zero-Touch enrollment for future devices. Please let me know what details are required from my side for onboarding.

We are using Microsoft Intune as our Android Enterprise EMM.Our Intune tenant is connected to Managed Google Play, but all apps show as “not available in your country/region”, and no Managed Google Play apps can be approved or deployed.This happens even though:Our organisation is based in the United Kingdom Android Enterprise is available in our country The issue persists across browsers, devices, and reconnectionsI could find no way of contacting Google or indeed Microsoft about this. Can anyone help?

Learn more about the changes to the new zero-touch customer portal   The new zero-touch customer portal has been designed to make it easier for you to manage your account. Here are some of the key changes: New look and feel: The portal has been redesigned with a modern look and feel, making it easier to navigate and find the information you need. Improved navigation: The navigation menu has been simplified and reorganized, making it easier to find the pages you're looking for. Updated Terms of service: Updated the zero-touch customer terms of service and customers will be prompted to accept the terms of service upon next login to the zero-touch customer portal. The terms of service need to be accepted once by an admin or owner of the customer account. If you own multiple accounts, you might need to accept the terms of service for each one. Note: when attempting to access the zero-touch customer API. Any existing solutions leveraging the zero-touch customer APIs to access an acco

Hello, if I am a manufacturer, how to install Android for devices that I have created?

اريد 

How I can disconnect linking with my it admin because my phone linked when I try connecting with my computer work

Hi everyone,I’m working with managed Android devices in a business environment and have noticed some performance issues during certain workflows.When users perform browser-based tasks that involve file handling (such as uploading or processing documents), the device performance drops noticeably.Some common observations:• Browser becomes slow or temporarily unresponsive• File uploads or processing tasks fail midway• Devices heat up during extended usage• Multitasking between apps affects overall responsivenessIn one case, while testing a browser-based tool for handling documents:PDF Online Editor or Amazon KDP Formatterthe experience was smooth on desktop but less stable on managed Android devices.Environment:• Android Enterprise managed devices• Work profile enabled• Standard browser usage (mostly Chrome-based)• Mixed device configurations (mid-range hardware)What I’ve tried:• Limiting background apps• Testing on different network conditions• Updating system and apps• Comparing managed

Not able to find m google account in manage play on Intune enrollment

Overview:Currently, robust device locking systems like "Samsung Finance+" or high-end MDM (Mobile Device Management) solutions are only accessible to large leasing corporations or big enterprises. There is a massive global market gap for a built-in, universal Android feature that allows small-to-medium enterprises (SMEs), schools, and small businesses to secure hardware sold on credit or loaned to users, without compromising user privacy.​The Problem:​Security Risk for SMEs: Small sellers who offer installment plans (credit) often lose assets because there is no native way to lock a device if payments stop.​Privacy Concerns: Current workarounds (like using Family Link) force sellers to have access to the buyer's account, which exposes private data (Search history, Photos, etc.).​Inconsistency: Existing solutions are fragmented and brand-specific.​Proposed Solution: "Google Device Secure-Lock"A native Android service that separates "System Ownership" from "Data Access."​Key Features:​Ha

I’m trying to connect Intune with Android Enterprise by following the instructions here: Connect Intune account to managed Google Play account - Microsoft Intune | Microsoft LearnHowever, when I’m prompted to sign up for the Google Admin Account and I enter my work email address as instructed, I get this error: “Email address is associated with an existing consumer account. Please use a different email.”I don’t understand what I am supposed to do here. I don’t have a “different email”. My work email address is my work email address.Thanks!