Android Enterprise General Discussions

I am developing an MDM (Mobile Device Management) application and need to manage pinned shortcuts programmatically as a Device Owner.Currently, I can add, update, and remove pinned shortcuts only with user interaction using ShortcutManager. However, I need to perform these operations silently (without user confirmation) since my app runs as a Device Owner.I checked the Device Policy API and Android Management API, but I couldn’t find any specific policy or method for managing pinned shortcuts as a Device Owner.  I attempted to use ShortcutManager#requestPinShortcut(), but it still requires user confirmation. I reviewed the Android Enterprise Documentation  but found no mention of pinned shortcuts management for Device Owners. Is there any hidden API or specific Device Policy setting that allows a Device Owner to manage pinned shortcuts without user interaction? If not, is there any alternative approach to achieving this functionality programmatically?

Hello everyone, I’m researching the implementation of Sidelink in 5G NR, particularly in commercial terminals or industrial modules that have already tested this functionality in real-world environments. We know that 3GPP introduced Sidelink in Release 16, with enhancements in R17 and R18, but so far, most deployments seem to focus on vehicles (V2X), industrial IoT, and private networks. I’m interested in learning whether there are pilot projects or tests with smartphones, IoT modules, or industrial devices that have activated Sidelink in scenarios such as:- Direct communication (D2D) without a mobile network- Coverage extension via Sidelink Relay- Support for positioning in private networks (RTT, OTDOA, AoA/AoD) (SideLink enhancement) So far, I have identified some modems supporting Sidelink, such as Qualcomm Snapdragon X65/X70, Mediatek Dimensity 9200, and Autotalks V2X, but it is unclear whether any commercial 5G terminals or modules have effectively implemented this

I have a customer as follows: EMM is IntuneEMM Bind account is a standard Gmail account, but uses their corporate email domain.  This Gmail account was setup before they became a Google Workspace customerThey now also use GWS for ChromeOS managementIf I try to add a Google Managed Play admin using their corporate email domain, then I get a message telling me that G-Suite accounts can not be used. How do we migrate their existing @corporatedomain.com Bind account to a GWS account so that it can be properly managed?

The customer reported an issue to us: on the personal part of his phones, business contacts are no longer displayed across his entire fleet when users receive SMS from business and personal contacts (only numbers appear, without contact names).By default, Samsung phones use the rich Google Messages application, as well as Textra, which are both impacted. This issue does not occur with Samsung's SMS application. We have tested on our side (Orange), and business contacts and numbers are displayed on the personal part. We have also tested with the customer, but it works randomly.Please take the necessary action.

Hello,We are observing a problem: several devices are no longer registered in ZeroTouch, as if someone had manually deleted them.Would it be possible to trace the origin of these deletions and identify who performed this action in ZeroTouch ?Thank you for your help.Hilaire

I develop a Custom DPC application for fully managed devices, and I am planning to configure global proxy settings for Android devices through our EMM Console. I want to restrict disabling these proxy settings, but I am unsure how to implement this restriction. I have reviewed the UserManager and DevicePolicyManager documentation but could not find any specific settings or policies to prevent users from modifying or disabling proxy configurations. Would anyone happen to know how to implement the restrictions that would prevent users from disabling proxy settings on fully managed Android devices? Thank you in advance for your help.

I accidentally locked myself out of my Samsung 24 Ultra cell phone I just bought last September. I have been told, even by Samsung CEO Rep, they can't get me back in my phone so I can use what I paid for. I sent an email to the head CEO of Google and got no response. Great customer service there, Bud. I know the FBI and other law enforcement agencies get in people's phones after they're dead or if it's some criminal's phone. I'm looking for a company I can hire, or an individual I can hire, to get my irreplaceable information off this phone along with all my gallery. I absolutely will not factory reset this phone and lose all my precious data. I would be very grateful for any suggestions. Thank you. A customer service toll free number or phone number for Android would also be nice.

Is it possible to have a system service in factory image that acts as an MDM client on device and communicates to a MDM server. Can the device be still GMS certified? Or do we need to use Android Enterprise APIs to get the GMS certification? 

Hi,I am currently using android phone(galaxy note 8, android 9) to enroll company portal. Before 01/2025, my company was Western Digital, and I could use company portal including bunch of android apps such as outlook. However, my company was separated to Sandisk, and I cannot use company portal after that. Is there any opinion why my phone cannot install company portal?When I try to use Microsoft intune, it always stops at the last stage of setting work profile. It says the device setting should be changed except the information; which device setting I should change to be fit for the company portal. Please give me any advice to make me available to use company portal.Or did android stopped supporting google enterprise old phones just like mine?

If you didn't see my other post Private app package name already in use I've asked one of our software vendors to make one of their private apps available to my organization. To prepare for that, I went to gather our organization ID and noticed that it's different depending on where I look. From the Managed Google Play Console:https://play.google.com/work/adminsettingsFrom the Managed Google Play iframe in Microsoft Intune:I know it doesn't mean much with the IDs blacked out but just wanted to show you where exactly I was looking. In the first instance, I'm logged into the same Google account I used to connect Intune with Google Play. Any ideas why the organization IDs would be different? I am wondering which ID to give them. Thanks.

Hello everyone, We recently received a notification from Google Play stating that our private app, which is only deployed within our organization on professional devices with our MDM, is not compliant with their policies.The message we received is as follows: Action Required: Your app is not compliant with Google Play Policies The funny thing is, we have the same app deployed on another Google Developer account, only the package name is different and this one has not been flagged by Google.We are puzzled by this as our app is only shared on professional devices within our organization.We do not distribute it publicly and we never know if we really need to take action when we receive this type of alert. Has anyone else faced a similar issue?Why would Google Play randomly flag and potentially remove our app?Any insights or advice on how to resolve this would be greatly appreciated. Thank you!

Please how can I get the location of a device after putting the device to lost mode using the Android Management API. Thank you.

AT&T enrolled us for Zero touch and provided us a Customer ID, is this the Customer ID we need to give every reseller?  We gave CDW our google account which it's what AT&T requested and now CDW provided us with another customer ID.  We do see both resellers but we have to switch back and forth between resellers and have to add every configuration to each reseller. Is this by default?  We are about to add multiple more resellers and would be nice if we can see all devices/resellers into on tap. Thank you

I have a work profile and I have company apps installed from intune.I also have 'personal' apps in the Work profile. These were added by me using the Work profile version of the Google Play store. As a result, I have work and non-work apps co-existing in the Work profile.My question is if my Employer can see those non-work apps and the app data which are in the Work profile? 

Our company change there name. Now we need to edit these informations in the zero touch portal. From the settings in the zero touch portal its not possible to edit it. My reseller also wont do a action for it. Can someone of you tell me if i can open a ticket for it or contact responsible enterprise team for it? For now i dont find any ticket creation area or contact address. Very much thanks in advance. BR,Nils

When I use the Android Management API to delete a device from an enterprise, the device is deleted but the physical device is not wiped, I can still see that the Physical device is connected to the enterprise from the device it self. The device is in fully managed mood. I want to ask if this is the normal behavior, because I'm expecting that when I delete a device from an enterprise with  AMA API, the physical device should be cleared and factory resetted?

I am trying to create a web token to embed managed google play iframe, the code is given below: private static void getWebToken() throws GeneralSecurityException, IOException { WebToken webToken = getAndroidManagementClient().enterprises().webTokens().create("enterprises/LC01l28hdc",new WebToken()).execute(); System.out.println("Web Token: "+ webToken.toPrettyString()); }  but after running it, I get a 400 Bad Request  "code": 400  "reason": "badRequest"  "status": "INVALID_ARGUMENT"

Is there any way to change the default configuration for press and hold from "Wake Bixby" to "Power off menu". Trying to run a kiosk application and it's confusing for users to need to hold the side and volume down button to open the power control. Bixby is otherwise disabled so holding the side button currently does nothing in its default configuration. Samsung support has unfortunately been less than helpful, and will only lift a finger if you pay for full Knox EMM.  

If I have an Android app, can I distribute it to customers without going through the Google Play review process? This means I wouldn't need to share the app's login credentials, as it is a corporate app. I would like to integrate it with Intune in the Google Play Console so that customers can distribute it further using Intune.

I have a EMM application where I want to configure the profile with some application like Play Seppo or Zoom. 1. From EMM application I have open a application like zoom or Play seppo2. Now zoom or Play seppo need default camera [Samsung tablet camera]3. When try to open camera application throw some error log like belowNote:  Also I can't open default camera app directly with the package name but others application I can. -> How can I get camera access for EMM application for secondary user and the others application? Error: Sending non-protected broadcast com.samsung.intent.action.MDE_SUGGESTION_NOTIFY from system 1207:system/1000 pkg androidIs there any security issue to open camera or how can I use samsung default camera in EMM application ?

When is the anticipated support date for the Samsung Galaxy S25 series phones?

Hello, I have a small case I'd like to submit to the community for help please. A customer use Mobile Iron, and use Zero Touch to enroll our Android 14 products. In their DPC extras, they enabled the system apps and need to keep that way:"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED":true,"android.app.extra.PROVISIONING_ADMIN_EXTRAS_BUNDLE":{"workProfileEnabled": true,"quickStart":"true"} Now after the device is enrolled, the Work profile is filled with bunch of apps including unwanted ones like Netflix, Adobe, YT kids, ... From Mobile Iron, they want to hide/disable some apps, using "setApplicationHidden" but it doesn't work. At OEM side, we tested this API with the Test DPC and it works properly. My thinking was that as we are in COPE, and the apps that the customer wants to remove are from the Personal space, then this is not working as the MDM cannot interact with Personal space content. Does this make sense? Are there a way to hide the unwanted

I got an APK from our Digital Signage vendor Poppulo (formerly known as Four Winds Interactive) and tried to upload it as a private Google Play app through the iframe in Intune. Got this error:From reading this article Best practices for private apps, I understand package names must be globally unique which makes sense. I am guessing that some other org already uploaded the same package that I have and now they are essentially the only ones that can use it....I definitely think this is Poppulo's fault and honestly I think it's kind of wild they don't just publish this app in the Google Play Store. Especially given they are such a big company and a very popular choice for digital signage. Regardless, I am curious if anyone else has ran into this problem before and if there is any sort of workarounds. It's my first time deploying a custom app and I've only just now realized that Intune's Line-of-business (LOB) app mode that lets you upload APKs is not allowed on devices managed with

We are currently using Microsoft Intune Mobile Device management solution to manage Android mobile devices, and these devices are currently enrolled in the mode of Android Device Administrator in Microsoft Intune. Google has deprecated Android device administrator management, continues to remove management capabilities, and no longer provides fixes or improvements. Intune will be ending support for Android device administrator management on devices with access to Google Mobile Services GMS beginning December 31, 2024. Hence, we're trying to setup Android Enterprise method of enrollment in Microsoft Intune. As part of pre-requisites in Intune, it's essential to connect Microsoft Intune account to managed Google play account. As per Microsoft recommendation, we are using Microsoft Entra account to connect to Google Play. After entering the Entra account username & password, authentication is redirecting to Google sign-in page and ending with below error.Someone at ABCD

We have hundreds of frontline devices that are impacted by a change in MS-Authenticator behavior. We found that on individual devices we could change Accessibility > Advanced Settings > Time to Take Action > 10 secondsand the issue was resolved. All devices are Work Managed in WS1 UEM. Is there a way to use Custom Settings profile to set this on devices?  I also looked at possibly using a simple app to pull up the setting for the user. I have seen other apps do this type of operation. But I cannot find a way to get the information to populate for the intent. Using adb I was able to see what it called each screen in Settings but it was always generic and not specific.com.android.settings.Subsettings, com.android.settings.spa.SpaActivity.