Android Enterprise General Discussions

Hi. It is new that you HAVE to Disagree/Allow Google Services on Samsung Android 15, enrollment?I've not seen it in Android 14 before.Is there anyway to remove it?Samsung Knox DEP --> Intune (Corp-owned, fully managed) 

Hi! We had problems with a few devices after enrollment today. The Managed Play Store did not work properly. Restarting and waiting seems to help. SymptomsEmpty collection in Managed Google PlaySpaceship error, because supposedly no apps were made availableInstallation commands from the UEM did not work in some casesApps assigned in UEM cannot be found in PlayI was only able to reproduce the problem in one of 3 attempts. A few automatic app installations worked for me. However, it was not possible to search for the apps manually. Restarting the device and then waiting a while seems to help. However, a colleague had a strange error in Managed Google Play after a restart when he tried to install an app manually."The item you want to buy could not be found."However, it is not a purchased app or an app with in-app purchases.  Is anyone else currently having problems with Managed Google Play? 

Is there any way I can block an input device to be connected to an Android device managed by Intune?I mean, I do want to block users from connecting an external mouse or scanner device to a fully manage device.I do not seem to find anything to do it... of course blocking Bluetooth  but what about if they connect a wired device?Any help will be appreciated.Thank youMyriam

"Hi, I'm getting a 'Blocked by IT admin' message when trying to access storage in my work profile on my Samsung phone. I need to access [photos/files/internal storage/etc.] - could you check if my permissions can be updated?"

My team uses Android Management API to manage our enterprise's devices. Our management policy includes managed configurations for our Kiosk application, in order to correctly enroll our devices into our services. If this is not done, device provisioning fails. Over the past few months (first report we received was on January 13th), we have observed that certain devices are failing to receive the managed configurations, and thus fail to go through the process correctly. They fail to receive configurations on a policy change as well, which affects our existing devices. Before, removing the devices from our policies and enrolling again would succeed in sending the managed configurations to the affected devices. However, this issue is now persisting across attempts and happening more frequently. We have devices affected on both Android 13 and 14.

We recently disconnected our Managed Google Play account from Intune, which was initially set up with a standard Google Account. Now, we are reconnecting Intune to our Managed Google Play account using a Managed Google account that is synchronized with our Entra ID SSO. This means we can sign in with our company domain (@mycompany.com) using our Entra ID password. We are able to enroll our Android phones into Android Enterprise and publish apps to our Managed Google Play store without issues. To ensure redundancy, Google highly recommends creating a secondary owner account in case the primary account is compromised. See Google KB . I'm following the guide on assigning roles in enterprises from the Managed Google Play Help. However, my Play Store account admin screen appears quite limited compared to what I should be seeing. Here’s a screenshot of my current view:Previously, when we used a personal Google account for our Managed Google Play Store, I could invite other users to

Hi community, I'm encountering a strange issue and could use some guidance.A Google developer account released an app to Managed Google Play (so it's automatically private and not available on the public store) and entered our organization ID in the appropriate field. We can find the app on the iframe in our MDM (Microsoft Intune in this case), select it, and assign it to groups.Everything looks good: BYOD deployments (Personally-owned devices with work profiles) can install the app from the Managed Google Play store. However, COPE devices (Corporate-owned devices with work profiles) cannot search for it, and it's also not visible in the app collections we've created. Could there be a setting in the Google developer account's store listing that prevents availability for COPE devices? I've exhausted all options in Intune, including multiple store syncs, with no success.Intune is telling me, that the App is available to install on the specific COPE devices, but it doe

I am unable to create a Company Work Profile and Microsoft advised to reach out to find out when the new Samsung S25 plus will be added to the google supported device list in order for me to do this.  I recently received this new phone so I need to be connected to my work portal in order to do my job and this device is not allowing me to do that since its not a device list.  Please advise. 

Hi, We have noticed that the Android Management API is currently not working. After a long delay, it returns an HTTP code 502 error. We have tested this across multiple accounts, and the behavior remains the same. Could someone provide clarification on this issue? Thank you.

Hi All,  Is anyone aware of a way to configure an eSIM on a device during enrolment rather than later in settings? We have a large customer that wants to use eSIM's but currently has to connect to a WiFi network to complete enrolment and then configure the eSIM later.  This adds many extra steps to the device setup greatly increasing the onus on the end user and the chance of something going wrong.   Many thanks David

  Hello everyone,   I recently helped a family member set up their new phone (after their old one had a long and fruitful life 😃). It struck me how important it is to help, when needed, to guide someone through using a new device and highlight key features that they may be used to using (and any new ones).    This made me think, this is a key area for work devices too and so I thought it might be interesting to hear how we do this across the community.   For example, do you provide documentation with step-by-step instructions, guidance on device usage and key information, or assistance when switching device types or operating systems?    It would be great to hear any tips you have for supporting colleagues with new devices, plus anything that would make your life easier when creating useful resources.   Thanks so much,   Lizzie

    Hello everyone,   We've had a couple of surveys this month, so I hope you don't mind another.    Here in the Customer Community, one of our most popular topic areas is on app management, so I'm hoping this survey is an interesting one for you all. 🤞 It would be great to hear your thoughts and ideas on ways you would like application management features and security to develop further.    If you have a spare moment, please take the short survey below and if you have any additional questions, please to reply to this topic below (by clicking 'Reply').  All of the feedback will be passed over to our Product team.   Feel free to share this with any colleagues or others working in this area, as it would be great to get a good amount of feedback around this.   Thank you in advance for taking the time to do this. 😀   Lizzie   Loading… Interested in other surveys? It would be great to hear your feedback on AE secure logs. 

We are trying to test OEMConfig with testing track (internal testing or closed testing) before make it public release new version to Google Play. However, the account with Enterprise Org ID is not able to access these versions. The account can only access Google Play App, private Apps. Is there any method to allow us accessing the testing track version apk in order to get the Schema of new version apk in order to submit to devices for configuration change.   Attached screenshot show the managed Play iframe. It only show the public version of this app.ThanksAngus

Hi, The way the Android API implements OS update management on Android Enterprise devices is not particularly useful for devices with user affinity. Are there any upcoming API changes for EMM solutions like Microsoft Intune? From my experience with the current API:AUTOMATIC – The OS update is installed as soon as it becomes available via OTA, which is not practical for real-time scenarios.WINDOWED – Similar to AUTOMATIC but with the limitation that OS updates can only be installed within a defined maintenance window. This means that if a user needs to update their device due to a software bug fixed in the latest OS version, they may not be able to do so immediately if the maintenance window is set outside working hours.Source: https://support.google.com/work/android/answer/13791272?hl=en#zippy=%2Cmanaging-system-updates-using-system-update-policies  Suggested Improvements:Provide an option to control OS updates on BYOD (Work Profile only). I understand that when enr

Dear Android Team,I’d like to propose the creation of an official, user-friendly platform—an “Android Idea Hub”—where end users can submit, discuss, and vote on suggestions for improving the Android ecosystem. While developer-focused channels like the Android Open Source Project exist, there’s a clear gap for everyday users to contribute ideas that could enhance the platform’s functionality and user experience.Why This Matters:User-Driven Innovation: Users live with Android daily and often spot practical opportunities for improvement—like my recent suggestion for time change notifications—that might not surface in developer-only spaces.Lost Potential: Dismissing user feedback as “out of scope” risks alienating your community and squanders valuable insights that could set Android apart from competitors.Engagement & Loyalty: A space where users feel heard would boost satisfaction, trust, and long-term loyalty to the platform.What It Could Look Like:A simple portal or app section wher

Hey everyone,   I hope you are having a good week.   AI is evolving fast, and we're curious how it's starting to shape your work on Android. Has your company embraced it wholeheartedly or are you finding people more reserved when implementing AI?    As part of our end of year festival, we had a brilliant community post by @BenMcc all about the hopes and pitfalls of AI so far (well worth the read if you haven’t already), and we’re keen to keep the conversation going - what do you think of his observations about ownership/accountability and the future of AI?   Whether you're a seasoned AI user or just dipping your toes in, we'd love to hear your experiences—even if they're initial observations or pilot projects. We’re looking for real-world examples and specific, impactful quotes that can be featured across our channels (or we could just have a great conversation below! 😀).   It would be particularly interesting in learn about: Specific AI Use Cases:

Hi everyone, We are facing an issue where G Suite apps like Google Sheets, Google Drive, and Google Docs are installed on our managed devices, but when we check them in the Google Play Store, they appear as disabled. In some cases, the apps are randomly disabled, requiring manual re-enabling. We have verified:Google Device Policy settingsApps are approved and allowed in the managed Play Store Despite these checks, the issue persists across multiple devices with G Suite apps. Has anyone else experienced this issue? If so, do you know of any workarounds or if there is an ongoing Google-side issue causing this? For reference, I have attached a screenshot showing the issue. Looking forward to insights from the community! Thanks,Rupesh

Hello everyone,   I'm a big fan of surveys and we haven't had one for a little while - so here we are!   We'd love to hear your feedback on a potential improvement to the Android Enterprise logs.    Android Enterprise logs provide critical insights into device activity and security, empowering organizations to manage and secure their mobile ecosystems effectively. These logs are divided into: Security logs, which capture key events like app installations, failed authentications, and policy changes, and  Network event logs, which track network activities such as app connections and destinations.    Logs are currently stored in the normal world (REE - Rich Execution Environment). We are exploring a feature enhancement to enable this storage in a secure environment (Virtual Machine) so that they are better protected.    This feature enhancement has a few options / levels and we want to understand their importance to you:   Logs stored

Hi, is there any way to get a report in Intune to check how many of the devices I have enrolled are roaming?I was able to do so in a previous MDM (MaaS360) but I am not able to find any option in Intune.Thank you

I have integrated zero touch iframe in my emm console and able to link zero touch customer account succesfully.My query is after linking the customer account and set configuration  how to set policy to these devices like app push and system settings configuration through  my emm console. Thanks in advance.

Hi everyone, We’re facing an issue where managed Android devices get stuck, preventing app installations when an app included in a policy is delisted from the Play Store. For example, we had the package “com.Xplayer” in a device policy, but when calling Products: get, it returned: “googleapi: Error 404: No product was found for the given ID., notFound.” However, this app was available earlier, and despite its removal, using the Devices: update API still updates the policy without any error or warning. Additionally, there’s a possibility that an app is present on the Play Store when it is approved and added to the policy but later gets removed or delisted by Google. This could lead to installation failures and devices getting stuck. Has anyone encountered this before?How can we prevent devices from getting stuck when an app is delisted?Does EMM automatically remove such apps from policies, or do we need to handle it manually by checking each package ID?Is t

I created an enrollment token for an enterprise for work profile, and I ensured thatsetAllowPersonalUsage("PERSONAL_USAGE_ALLOWED"); was set for the token.  How ever when I try to join from my android 11(tecno) and android 14(google pixel 7) device with work profile via the ADP app, I get :Can't add work ProfileA work profile can't be added to this Pixel. If you have questions, contact your IT admin. However from my emulator device running Android 15, I could join the enterprise using work profile.

Hello, after creating an admin account and assigned to Zero Touch Portal, I get Error 403 (Permission denied). My admin account has been associated to a Google Account but still getting Error 403. Any idea how to resolve this issue. Thanks in advance.    

I would like to configure an Enterprise WiFi network for the user of my app.When I manually configure the network via the settings app, I choose "Use System Certificates" as CA certificate and set the domain to "".How can I set this option using WifiEnterpriseConfig?   Got "Enterprise configuration mandates server certificate but validation is not enabled." error without specify a list of X.509 certificates.val suggestions = ArrayList<WifiNetworkSuggestion>() // WPA2 configuration val wificonfig = WifiEnterpriseConfig(); wificonfig.eapMethod = WifiEnterpriseConfig.Eap.PEAP wificonfig.phase2Method = WifiEnterpriseConfig.Phase2.MSCHAPV2 //wificonfig.caCertificates = ?? wificonfig.identity = binding.txtUserid.text.toString() wificonfig.password = binding.txtPassword.text.toString() wificonfig.domainSuffixMatch = "test.com" try { suggestions.add( WifiNetworkSuggestion.Builder() .setSsid("test") .setWpa2EnterpriseConfig(wificonfig) .setMacRandomizationSetting(RA

Hi Team, I have a couple of devices that I could add in the Zero Touch Reseller Portal; however, the device doesn't take ZT. I have other devices in the same ZT account, and it works fine. Any suggestions??