Android Enterprise General Discussions

Hi there,I’m looking for clarification on Microsoft's recent update about upgrading tenants from a Managed Google Play account to a Managed Google Domain account in Intune. Intune Android Enterprise Update We have 130+ Android Enterprise devices enrolled in Intune with an old Gmail account we dont have direct access to. Our Intune connection was originally set up using this account back in 2023.Now we have the option to "Upgrade" our account but we need to understand the risks before we proceed.Microsoft says that we can continue managing devices under the new Entra‑linked Managed Google Domain account without deprecating the old method, and without device impact.Is the migration fully in‑place and non-disruptive?Meaning:No need to retire devicesNo re-enrollmentNo break in Managed Google Play syncNo loss of approved apps or assignments Is this migration guaranteed to perform an in-place transition of the administrative account without:Breaking the existing Android Enterp

We have a great wish to place shortcuts for specific apps on the home screen when the app is installed (or at a later point), but this doesn't seem to be possible.When we discuss this with our MDM provider (SOTI), we are told, it is a Google/Android limitation, and this seems a bit strange to me; is it really not possible to place shortcuts on the home screen to your own liking? I hope this resonates with others - or even better; that I can be corrected, and there is a smart and easy way to achieve this goal. We run all our Android devices as fully managed, if that is relevant.

Hi,      I am setting up some new Samsung devices with Intune.  I have chosen to go with Company Owned Work Profile (COPE). in the work profile, I see a Work Phone app and a Work Messenger app. How can I transfer the info from their existing phone to here?  Smart switch will goto the Personal profile. There is a Samsung and Google Account on the phone.  How do I verify that the data like text messages (from the work profile) are being backed up to one of those accounts? I can probably move the contacts to outlook so the work profile is syncing that. Also, on the S24Fe I am testing on, it created Messages in the work profile, but on the S25 it didn'tany way to get that to install? Thanks -Joe 

Hey Team,   I was trying to add another user as Admin in our Zero Touch Portal. However, post adding the user, my Owner Role was downgraded / changed to Admin. How do I get the Owner Role back to my account.   Thanks in advance.   (This post was edited to remove personal information, in compliance with our guidelines)

Hi All, I'm trying to get the new Google TV Streamer (4k) to get enrolled in Hexnode as device owner. Now getting the Google tv Streamer into the modus seems to be a problem. You need to fill in an google account but when you do that, the device doesn;t allow you to become device owner because there is already an account on it (even when you delete the account). Tried ADB, the App Store etc. Anyone have suggestions or solutions?Regards, Niels

HeyAs I saw that bunch of question have been left unanswered on the expert forum is no one at Google monitoring the feed? I just wanted to post it here as the conversations seem to get more traction here. Is there official thread where feature request could be sent, I have been supporting mobile device management over way over a decade and in that time I have seen all sorts of things and there would be some features that would help greatly in managing enterprise environments with Android. Couple examples:It would be great if there would be a way to deploy some contact numbers to the devices on device address book, such service desk or onsite support number. This is especially needed for dedicated devices which usually do not have any email accounts associated with them and getting common contacts deployed to all devices is quite labor intensive with the current tools. Another one is the OS update management, which is lacking quite a bit, especially as I need to do a comp

Hi today we raised a case with Microsoft for a specific work profile issue with their current Outlook and MS Teams implementation. I wanted to share this here, maybe there are some other customers/admins facing this issue. Our org started to move from Cisco to MS Teams PSTN calling some month ago and everything was fine, but I assume an update to either Outlook or Teams app was published and the issue started. Scenario: COPE or BYODMS Teams and MS Outlook in work profileMS Teams has a PSTN line configured (either mobile or landline) Open Outlook, search for any contact and try to start a call to a mobile or desk number. The OS does not ask whether you like to use the phone on personal profile (as it did the last couple of years 😅) - it will hand over the call request to MS teams! You cannot decide to make the phone call with your Phone app :-( This breaks almost all use cases for our users. Even worse: A phone number like +49 123 828282 is transfered to M

Hi all, we use a Google account in our Ivanti Neurons mobile device management system as an Android Enterprise account to manage the android apps and devices. Our account gets disabled with the following message: "Apparently, this account has been used in a way that violates Google's policy."We are unaware of any policy violation and don't know why this happened. At the moment everything is still working in the mdm, but Google says the account will be deleted in june 2026. Is there anyone from Google who can help me with that and can tell me why this happened?I fear that we will have to re-enroll all android devices if the account is deleted and we cannot find another solution to reactivate the Google account till then. I would appreciate any help. Thank you.

Hi everyone,I’m building an Android Enterprise device management solution and I want to keep everything fully compliant (Android Enterprise + Google Play policies). Use case: a company provides company-owned devices to customers under a leasing / device financing contract. We need to manage this at scale (10,000+ devices) across multiple customers/tenants. If a customer becomes delinquent, the company needs a temporary restricted mode (e.g., kiosk/limited access) until the account is back in good standing — with clear user notice, grace period, and contractual consent. What we want to control at scale: enrollment, policy assignment, app allow/deny lists, kiosk/lock task mode, updates, compliance reporting, and remote actions aligned with Android Enterprise best practices.Questions:Is this type of “restricted mode for delinquency” considered acceptable in the Android Enterprise ecosystem when devices are Company-Owned (Device Owner) and the policy is transparent/contractual?Fo

Hello,For the past two weeks, we have been experiencing issues during the enrollment of some of our devices. After enrollment, the Play Store is empty and no apps will install. This is a problem that has occurred before, and a fix was provided by Google (link). A case is currently open between our MDM vendor, Ivanti, and Google: link. (issue tracker 399818918)Are other people experiencing this issue? Our vendor has indicated that at least one other customer is currently facing the same problem.Best regards

Hey,Not sure if this is at all correct place to address this, but once again when I started to do the renewal for Android Enterprise Expert certification, I though that I would want to ensure the Android Academy is still the correct place to do these, as the material is seriously outdated, even it still factually largely applies, it still seems frankly dumb to read upon features that came out with Android 5.1 - 8.1, and obtain a certification by that way.  Also the session that can be enrolled via the portal, are still titled that what is new on Android in 2025, though the session is for this year. If someone has some knowledge of the above would appreciate any info as had to dig abit via various contacts to get info of this community site. 

I am unable to register a new device utilizing the Google Services Framework Android ID. Upon entering the ID and clicking the register button, the page is unresponsive. I have tested this on multiple browsers (Chrome, Brave, Firefox) with extensions disabled, but the issue persists. The page simply does not react.

Is anyone observing AMAPI requests for GetApplication and PatchPolicies failing intermittently ? I am observing intermittent failures with the log - "googleapi: Error 503: The service is currently unavailable., backendError".

Hello,I manage a fleet of more than 1,000 Samsung Android devices using Omnissa Workspace One (AirWatch), devices are enrolled in COPE. We use Gmail, Google Calendar, and the native Samsung Contacts app in the work profile, all synchronized through an Exchange ActiveSync connector. Since Wednesday, November 26th, we have been experiencing synchronization issues: - Contacts and calendar events saved on Exchange disappear after some time.- The Calendar app eventually shows an “Unauthorized Action” error and refuses to open.- Gmail continues to sync emails normally. The issue occurs randomly (sometimes after one hour, sometimes longer). Clearing Gmail’s app data and signing in again temporarily resolves the problem, but the issue always comes back. We've tryied uninstalling and reinstalling the app through our MDM but we can only do it user by user and we're not sure about it fixing the issue. We have no means to "rollback" Gmail's version to an older one through our M

Hello everyone!As we look back on a fantastic year, we wanted to say a huge thank you. From lively forum debates and problem solving to in-person meetups; your energy, collaboration and expertise has made this community more vibrant than ever.To celebrate, we've gathered some of the best moments into one recap: A special thanks to our most active contributors:@Moombas , @Michel, @jasonbayton, @Kris, @Yann_ROLAND, @turquet, @Alex_Muc, @mattdermody, @BenMcc, @jarmo_akkanen, @Rakib, @Flo, @jeremy, @westd, @Magcho, @davidtse916, @weberda  Since we couldn't fit everything in, please share your own highlights below! (And, if you have 5 minutes, we would love to get your feedback on the community programs in this short community survey.)With 2026 already heating up with lots of exciting things, we look forward to driving the future of this community together. Thanks for a great year and we wish you a very happy festive season filled with food, fun and rest.   AE Community Team

Hello AE community, Happy new year, Our users encounter a problem when looking for private apps on the playstore, Apps doesn't appear until you type their full name, For exemple: we have an application called "Conformite"When typing "Confo", the app doesn't show upWhen typing "Conformite", it works When looking for a public app like teamsTyping "Tea" Teams shows upTyping "Teams" Teams shows up We created a playstore category to make this search easier, Is there something to do on the playstore console ? I can add screnshots if needed Regards,Batlac 

2025 was a big year for Android Enterprise. This was the year several long-missed features finally landed, Device Trust became a thing, zero-touch got a compliance and audit boost, provisioning saw a revamp, and the Android Management API quietly kept adding the sort of controls that make admins' lives easier. So, in the spirit of celebrating a strong year for the platform, here are 12 Features of AE-mas (let's not worry about the title.. I was strugglin'), in no particular order, chosen somewhat at random as - would you believe - the list could have been longer should I have chosen not to follow the 12 days of Christmas as the theme.. 12. APN overrides via AMAPI APN management finally arrived. In May 2025, AMAPI gained apnPolicy, allowing admins to define and enforce APNs directly through policy. This closes a long-standing gap for cellular deployments where “just set the APN” has historically been anything but. It's great to see this functionality pulled out

I hope someone here can help me, since I've been stuck in this issue for over a month now.I can not configure notifications on my work profile. I am the admin so should be able to allow this for users. I'll share some screenshots to illustrate the issue.First, the disabled notification:   Then, the advice of gemini:The Solution: Change the Admin PolicyYou must log in to your Google Admin Console and change the setting that is blocking this.On your computer, log in to your Google Admin Console at admin.google.com.In the left-hand menu, navigate to:Devices $\rightarrow$ Mobile & endpoints $\rightarrow$ SettingsClick on Android.This page lists all your Android policies. You are looking for the setting that controls app permissions. It is most likely in one of these two sections:Primary Target: Apps and data sharingLook for a setting like App permissions or App settings.The current setting is likely "Block user from modifying" or "Set to... (Enforced)".Change this settin

i am facing the issue in android 14 or 15 when ever i build the unsigned build it work fine for the android 13 after that it give the error like something went wrong please contact to the it admin and i am build the singed build it give error for the checksum error cannot setup but same thing if i make my app as a device owner by adb command it work fine for me let me know how to fix this issue?i try to replace the checksum and i match both checksum both are same it getting error for me why?below is my mention qr code json,{"android.app.extra.PROVISIONING_DEVICE_ADMIN_COMPONENT_NAME": "com.abc.abc/com.abc.abc.utils.receiver.MyDeviceAdminReceiver","android.app.extra.PROVISIONING_DEVICE_ADMIN_SIGNATURE_CHECKSUM": "F-EJlegNKdVupdJupPmWz34s2INjWVUDS5ErL-DuETc=","android.app.extra.PROVISIONING_DEVICE_ADMIN_PACKAGE_DOWNLOAD_LOCATION": "https://downloadapk","android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED": true}

After numerous support tickets saying Google Play Protect has blocked our DPC app from being installed with the QR code I found this site and from what I understand there was a change at the start of this month that was only advertised to Google Enterprise Partners regarding who can use QR code enrollment and other Android APIs in their app.  Applied for EMM/DPC account twice and each time less than 12 hours later denied with"On reviewing the information that you have submitted in your application, your organization does not meet the requirements to enter the community."I have explained that we have contracts with companies (which we are now in breach of) and are in talks with the Military for a custom DPC solution. RRiVEN LLC has been a company since 2011 and our DUNS profile reflects that.  I have read https://developers.google.com/android/management/permissible-usage https://developers.google.com/android/play-protect/warning-dev-guidance#android_enterpr

Hello,  I am working on a Mobile Device Management system and just received a bug report about the Require Entry option when resetting a password.  Since I set the Require Entry option I expect that the device does not accept any new password changes until I unlocked it at least once with the new credentials. This did not work. I was able to change the password numerous times over the Google API without logging in once.  In your documentation here: https://developers.google.com/android/management/reference/rest/v1/enterprises.devices/issueCommand#ResetPasswordFlagit' s outlined that the flag should force the device to not accept any other password changes over the Google API by admins until the user has entered the new password.REQUIRE_ENTRYDon't allow other admins to change the password again until the user has entered it. I traced the issue through my software and checked all requests. My initial request to Google services looks like this.&nbsp

Issue Description : After device enrollment, Devices.get() and Devices.list() intermittently return “No Device was found”/an empty list for the same device for an extended duration greater than 15 mins.This behavior persists beyond the propagation delay described in the documentation, which is 2 mins. Impact: App Distribution affectedOur EMM supports incremental app distribution:Fetch current device policyMerge additional appsRe-apply policy using Devices.update() When devices.get() / devices.list() are unavailable:We cannot retrieve the current device policy --> Incremental app distribution failsDetailed Reproduction Steps:Enroll device (afw#DPC_IDENTIFIER managed accounts method)Call Devices.update() to distribute apps that were pre-configured for installation during the enrollment process. Call succeedsCustom DPC adds managed Google Play account on DeviceCall Devices.List(enterpriseId, userId) → Returns empty for 15+ minsCall Devices.get(enterpriseId, userId, deviceId)

Hello Android Enterprise Community,We are currently building a custom MDM solution based on Android Management API and have completed the full end-to-end workflow, including enterprise creation, policy creation and assignment, enrollment token (QR) generation, device command lifecycle testing, Pub/Sub notifications, and admin panel and backend integration.The enterprise is created successfully, however the initial device limit shows as 0, so we are unable to enroll any test devices at the moment.We have already submitted the Android Management API initial quota request form with a detailed business use case and supporting architecture documentation. Due to the holiday period from December 19 to January 5, we understand there may be delays in review.I would like to ask:Is there any recommended way to test device enrollment while the initial quota request is under review?Is a temporary or development test quota ever enabled for validation purposes?Are there any best practices to validate

Hi Android Enterprise Community Team,   We are currently blocked from the partner onboarding process due to a system error that seems to have locked our DUNS number in a "ghost" application state.   Here is the chronological sequence of the issue:   First Attempt: I initially applied using a generic Gmail address and was correctly declined. Second Attempt (Corporate): I followed the instructions and re-applied using my corporate email. The Error: This second application was marked as "Declined - Further information was requested but not received". However, I never received any email requesting further information (I have checked all Spam/Junk folders multiple times). The process seemingly timed out on the server side without notifying me. Current Blocker: Now, when I try to "Resume Onboarding" or start a fresh application via androidenterprise.dev with my corporate email, the system allows me to log in but throws a generic "Oops Something went wrong" error immediately af

Apparently, Google has a new policy that only approved DPCs can be installed through QR Provisioning; otherwise, their installation will be blocked.Link: https://developers.google.com/android/play-protect/warning-dev-guidance#android_enterprise_dpc_enrollment The problem is that I am not able to understand how to apply for DPC approval. I found this page, but still not able to find out where to apply. Your help is appreciated. Thanks