Android Enterprise General Discussions

Hi all, I'm just wandering about using paid apps on work devices and wanted to know how others here are working with paid apps.  Another brand I shall not name makes it possible to purchase apps via a portal and then deploy those apps to your end users. But Google / Managed Google play does not offer such a solution. It makes it difficult to deploy paid apps.  While most apps offer license options outside the playstore, not all of them do. How do people on the community deploy paid apps that need to be purchased through the playstore? As said before, just wandering what solutions people use to better advise our customers in such cases. I don't get this question a lot, but every few weeks it pops up somewhere (mainly because we also provide services on the dark side hardware).  I'm aware that this has been mentioned a few years ago on this community, but just seeing if this have evolved. Distributing Paid Apps | Android Enterprise Customer Communi

The ability to apply a managed configuration to Gbaord has disappeared. We think this is due to a recent change to the Gboard app where Google has removed this ability.   Environment:MDM = Omnissa Workspace One UEM (we are also hearing reports of this impacting SOTI customers as well)Rugged Zebra Mobile devices, majority running either A11 or A13Leads:Managed App configs are still present on Chrome & ServiceNow Now Agent, hence why we believe this is not an MDM Console issue. We have escalated to Omnissa support anyway, who have in turn escalated to Google.Is anyone else seeing this issue?

All of a sudden I'm having issues installing apps through Managed Play on isolated devices. When navigating to the app directly I can see "This item isn't available in your country."  The devices are in the US. Location services confirms this, the external device IP is also US based as well. I have cleared cache and app storage of Google Play and Google Play Services. I have upgraded Google Play Services.  The devices are fully managed with manage service accounts. I have reset the account assigned to the device. I have tried to set the Country manually in Google Play setting but am unable to do so. It does not show a current country. I also see an option for "Switch to the United States Play Store" but tapping on it doesn't do anything.  Any ideas or suggestions here?

I work for an MSP.  We have taken on a new customer that has lost the password for their EMM Bind account (EMM is Intune).  Has anyone else been through a recover process for this and have any advice?  The have approx 200 devices enrolled, so we can't risk them having to be enrolled.

Hi all, Recently joined the community, first time poster here. TL;DR at the bottom. Hopefully my question has a simple solution but I've looked everywhere (except here of course).I'll try to keep this as simple as possible. Everything is in UAT if that matters. The important bits:Pixel 8aBuild BP1A.250505.005.B1No SIM or eSIMAndroid Enterprise registered to my UAT TenantI'm testing some scenarios for automating device compliance with Omnissa using Workspace ONE Intelligence. To test this successfully I'm going to need to flash back to an older Build and probably more than once for demo purposes. The OEM Unlock toggle is not available however, and I this is preventing me from doing my testing.I've read conflicting posts elsewhere regarding carrier unlock, SIM and/or eSIM etc.  ADB is working fine but flashing older images is just not working.  Any help from the community on how to get OEM unlock enabled would be greatly appreciated. &nbs

Wondering if anyone has come across a way to restore an "app collection" in the Managed Google Play Store? I would like to be able to take a back up and restore the collection should it be deleted in error. On a shared tenant basis and having only 1 account for the MGPS is something we need to have steps in place for.

Hi all,I’m currently experiencing an issue while setting up Intune MDM on Android devices related to restricting copy and paste to unmanaged apps. Specifically, the issue occurs when users copy text from the Teams app and try to paste within teams app.Here's what happens:After copying text, a message "Your organisation's data cannot be pasted here" immediately appears in the clipboard hud. The copied data seems blocked from being viewed, as the error message appears even before a paste attempt.Despite this, users can manually paste the copied content by long-pressing or selecting "Paste" from the text box. However, when trying to use the "paste from clipboard" feature, the warning message above is pasted instead of the copied content.We’ve set the Intune policy to allow copy/paste within managed apps, but the clipboard interaction seems to be problematic, especially with Gboard. It appears that Gboard, possibly due to Android 13 and 14’s Clipboard Editor, is treated as an unm

Hi, I've got a device owner app I've written, it's working well when I install it via a QR code, but I want the stock Pixel / Moto setup wizard to run during / after the device owner setup wizard.I've done quite a lot of research, this doesn't appear to be easy!Any pointers / leads in the right direction to how I might achieve this would be greatly appreciated. Methods, source code to read, etc.Thanks,Richard

I'm stuck with getting DEVICE_POLICY_MANAGEMENT role for my application.  DevicePolicyManager reports that my application is active admin (isAdminActive() returns 'true') and device owner (isDeviceOwnerApp() returns 'true'). But role is not assigned ('dumpsys role' reports no holders for android.app.role.DEVICE_POLICY_MANAGEMENT). Pre-requisites for getting this role seem to be fulfilled  (like required-components from roles.xml) Found this article from @jasonbayton saying "Only an OEM can grant this permission to an application". Does this mean there's no way for downloaded application to get DEVICE_POLICY_MANAGEMENT role and device's configuration files to be modified for granting this role (config_devicePolicyManagement)? Thank you!

We have a cloud customer on SoTI mobicontrol who wants to block all outbound traffic in their firewall and only allow what is strictly required. I’ve provided the customer with the official system requirements for SOTI MobiControl and Android Enterprise.However, the customer is only familiar with managing Apple devices and is looking to open the absolute minimum necessary for Android Enterprise to function — particularly avoiding wildcard domains (*) where possible.Can anyone help clarify which Android Enterprise network requirements are actually essential, especially when it comes to Google services, and which ones we can safely leave out? No file sharings, and remote control will be allowed by the customer.

Hi everyone, In our MDM Workspace ONE UEM, we are conducting tests to update Google Play applications on corporate devices under the following scenario: New version of a managed app published in the Production track, deployed in High Priority mode to 100% of devices (no staged rollout).The Android devices have a profile installed with the "Auto update" payload configured to "Always auto update", with an all-day window so the update can occur at any time, ignoring the documented restrictions (https://support.google.com/work/android/answer/9350374?hl=en#zippy=).According to our tests, the device updates itself (without manual intervention) in around 10 hours on average. We expected the update to occur more quickly in this scenario, and we require greater agility for Production deployments. Is it normal to wait around 10 hours for an update in this scenario?Is there anything else we can configure to reduce the waiting time? Thank you very much,Vicente

have a question regarding controlling the managed App version upgrade on device and restricting this via Google managed play https://play.google.com/work. Using managed google play app if I use “Revoke app..” option ( Refer screenshot), App will be unapproved from managed play store and removed from device Managed Private playstore followed by uninstallation from the device whenever there is new permission requested or new release has been pushed by app developer?             OR          App will be just unapproved from managed play store and will not impact any device already installed the app?       2.   App getting Unapproved on managed playstore will see any impact on devices if the app was earlier pushed on Devices as the available app via EMM sol. like Intune. AirWatch ( not required / non-mandatory app) and device have not installed this app and now trying to install the

One of our customers is currently onboarded to Airwatch to manage their devices, but they want to move to our Android Management API (AMA) based device management solution. Is there any support available to silently migrate these devices? Or is the only way to wipe the devices and onboard AMA. I see there is support if we own the custom DPC application. But in this case since its owned by Airwatch its out of our control. 

We’re seeing an issue with Google Play’s device integrity checks on meeting strong integrity.  Is anyone else seeing this error?  

Hello guys. Can i get a ideia about the Motorola G05 compatibility with the Android enterprise service and VMWARE MDM

I have added a private app to our managed play store (MS Intune) and followed the steps documented in Distribute private apps to make this available to a partner organization but unfortunately when they attempt to add the app to their UEM solution (Omnissa Workspace ONE) by play store URL they receive a http 404 response and cannot proceed.We have shared an app with them previously (same app, different productFlavor with app id suffix) and that worked seamlessly so we are bit stumped. Reaching out to our respective vendors has not been fruitful so it's not entirely clear what to do next, would appreciate any advice you have!

Hi,Does Google offer any caching service to help reduce bandwidth usage when deploying apps through an EMM solution?For example, in the case of public iOS applications, Apple provides a Content Caching service that speeds up downloads and reduces bandwidth consumption: https://support.apple.com/en-gb/guide/deployment/depde72e125f/web.Regards.

Hi, I would like to ask you if there´s any Google check or limitation if the device has been enrolled to MobiControl with Google Play Account but after the enrollment device is connected in company closed network (without access to google services).Randomly on these devices after several months is displayed error message: Google Play Account: Account creation failed. Please click to try again. So of course on closed network it´s not possible to create it and it seems it´s fixed on hotspot but it takes a long time to create an account. Now I´m not sure if this notification will be displayed on these devices in closed network after several days or months. Right step is to enroll the device to MDM as AOSP but I would like to know if somebody enroll the device with google services but after that the device is moved to closed network. Is there any limitation after xx days / months? Thank you

I'm currently registered in the Android Enterprise Partner Portal (https://www.androidenterprise.dev/s/) and would like to apply to become a Zero-Touch Reseller. However, I am not seeing any option or link in the portal to start the Zero-Touch Reseller application process.Could someone please advise on the correct steps or prerequisites for enabling this feature? Is there a specific approval or account level required before this option becomes available?Thanks in advance for your help!

Hi , I saw Spingdel   (  www.springdel.com )     is using AE API for mobile phone business in Mexico  for customer https://citycellmx.com/ I want to check is it allowed or not ? thanks Jason 

I have some customer who uses my EMM console integrated with Zero touch services. Some of his previous used device added in zero touch portal but not activate the device as enterprise device that  means not enroll in emm portal. Rather using the devices as personal.Is it violate the google zero touch policy?

{written in Gemini ;) who literally wrote this out perfectly}I'm requesting an enhancement to the Android Device Provisioning API (Zero Touch) to include filtering capabilities, specifically the ability to filter devices by serial number (and other relevant fields) in the initial API call.Current Situation:Currently, the API lacks direct filtering. As demonstrated in the code below, to find a device by its serial number, we must:Make a call to list all devices for a customer.Iterate through the entire list of devices in the response to find the specific device.Iterate through any following pages if not found on the first page.This is inefficient, especially for customers with a large number of provisioned devices.const listDevicesUrl = `https://androidprovisioning.googleapis.com/v1/customers/${customerId}/devices`; // ... const listResponse = await fetch(listDevicesUrl, { ... }); const listData = await listResponse.json(); let foundDevice = null; if (listData && listData.device

Hi Team,  We are unable to enroll the Samsung S25 Ultra devices in Intune as BYOD. We are getting the "Can't add work profile " error during the enrollment process. So far we received couple of requests for same issue and the affected users count is increasing day by day. We have reached to Microsoft team as well, they suggested to check with Samsung team.

I'm being very confused when trying to add a private app into the Stix EMM, and I'm not sure where the problem lies, so I'm asking here! I successfully loaded it in: But when I then click on that and then try to click Select app... nothing happens. Nothing on screen, nothing in the dev console, no network traffic... Nothing.  And so I can't add this app to my devices. And I'm entirely lost as to what's going on. Is this a Stix thing? Or an Android Enterprise thing?

Hello, We manage Android mobile devices with an Ivanti MobileIron MDM. For the past few days, we have been experiencing issues with forced installations—they are no longer being pushed to our devices (silent install). Ivanti has indicated that Google support tickets have been opened. Bug referenced at Ivanti:It shows gms complaining about bad authentication in bugreport:[RequestTokenManager] getToken() -> BAD_AUTHENTICATION. App: com.google.android.gms, Service: oauth2:https://www.googleapis.com/auth/experimentsandconfigsCurrent understand of possible cause is that when issue occurs, google play account failed to got authenticated and re-auth could not recover it properly in time. ResolutionWe have several tickets open with google for now, and working with google on this issue.Google ticket number:399818918398768257395681748393388830Google is rolling out a backend fix. Do you perhaps have more information about the issue and/or its resolution ? Are other people a