Android Enterprise General Discussions

Hi,Few of our work profile customers are facing issue accessing work profile notifications on their smart watches. This used to work before and it stopped working few weeks back. We have not done any changes to the Android Management API policies and are not sure what is causing this. Is there a specific policy setting applicable for this that we need to enable? Attached few screen shots.Thank you.

I am considering the introduction of Android Enterprise in my company and am testing the distribution of configuration policies from Intune. The enrollment profile is set to COBO (Android Enterprise corporate owned fully managed). I do not want users to log in with their personal Google accounts, so I want them to log in to apps like Google Meet with the Google Workspace account managed by the company. However, when I set the "Restrict personal accounts" policy in Intune to block, no Google accounts can be added at all. Conversely, if I disable this setting, both personal and Google Workspace accounts can be logged in. Does anyone know a solution to this?

Hi.I have tried to set up a zero-touch account, but when I log in at https://enterprise.google.com/android/zero-touch/customers, I get an error message like "Error 403. The account xxx@yyyy.zz is not authorized to see this page. Contact your administrator for access, or use another account."How can I get help with this issue? I can't see who would be "my administrator"...

Hi everyone, We’re using the Managed Google Play JavaScript API to generate a Web UI by passing the web token obtained from Enterprises.createWebToken. However, we are encountering issues when trying to use the token in the iframe.According to the documentation ( https://developers.google.com/android/work/play/emm-api/managed-play-iframe ) , all pages in the iframe should be enabled by default. But in our case, the expected functionality is not working as intended.Has anyone else facing similar issues with the web token? Are there any known limitations or recent changes that might affect this? 

Hi - we have an AR app that our customer wants to distribute to their workers as a Managed Play Store app for a device setup in kiosk mode. They are using Microsoft Intune as their MDM. The device is a Samsung Galaxy Tab S9 FE+ (Model #: SM-X616B / Chipset: Exynos) …that is on Google’s list of supported devices for ARCore.  Our app relies on Google Play services for AR (ARCore). Customer is able to find, select and install as an non-managed app. However, when they try to add under the Managed Play Store - they cannot find it (see screenshot). Finally, they noted the same issue with another MDM (IBM MaaS360). Therefore, it seems to be an issue with Google Play services for AR component/app being incompatible with Managed Play Store. Could someone from Google confirm this? 

I need help. Someone installed an AVD onto my phone and they keep deleting my storage and changing my passwords. Also turned off my networks so I missed very important calls. Could someone help me to remove this and let me know how to stop this going forward. Thank you for your time. Greg

Hello, I was looking into options for internal use on how to manage enterprise devices and the documentation seems to point to the android management API. What was not very clear to me:Is there any pricing model documented for using the API ? As mentioned, it would be for internal useDoes this require to be registered as an EMM provider, even if it would be used internallyAppreciate any inputs, thanks!

Hello Everyone, I'm trying to determine if I have a config issue, or a device issue with a Zero Touch Configuration. My configuration for DPC extras is as follows.{ "android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED":false, "android.app.extra.PROVISIONING_LOCALE":"en_GB", "android.app.extra.PROVISIONING_USE_MOBILE_DATA":true, "android.app.extra.PROVISIONING_ADMIN_EXTRAS_BUNDLE":{ "com.google.android.apps.work.clouddpc.EXTRA_ENROLLMENT_TOKEN": "TOKEN" } } So this works to the point that the language is being set and the enrolment token is being applied to the device. However the two config lines where there is a true\false option don't seam to be applying or working in the way I would expect. When the device is reset it always asks for the WiFi connection even when mobile data is present.And after enrolment all the system apps are installed.The device in questions is a Samsung A15 Two initial questions; - Is there anything wrong with this config?

Hello everyone,Since more or less a month, lot of people in our company are getting "can't install app" error from play store, the common case is just after enrolled the device try to install all auto apps from mdm but sadly get this error for the most of apps... some device just move on and install after some minutes, others stay with the error and never install the apps.We got other cases where people can't install the app from play store with no reason.It happens on COPE devices but on fully managed too. Any idea of what's happening here? 

Following the docs https://developers.google.com/android/management/policies/dedicated-devices to setup a KIOSK policy, but result in this error. 

Several users are reporting that they are unable to register devices with Intune via ZTE.  They get the not-very-helpful "Can't set up device" message.  Is ZTE broken now?  Any others seeing this issue?  Our ZTE config for Intune has not been modified. Thanks! Bill

I have an Android application that I want to use on TELPO devices, but in a way that updates are downloaded silently on the device, meaning the user does not have to intervene to update or install an application. I understand that with the configurations offered by Android Enterprise, it is possible to set up a device to allow the actions I require.

Hi everyone!We're building a new Android EMM solution. Our product already supports on-prem and we'd like to do the same for our users who want to manage Android.I have a few questions regarding the Google Cloud project required for using the Android Management API. Specifically, I couldn’t find documentation on this topic and would appreciate your insights on best practices.1. Google Cloud projects for on-prem customers: Should our on-prem customers create their own Google Cloud projects for managing Android devices?2. Quota limitations: Given that customers with more than 500 devices may encounter limitations as described here: Android Management API quotas, should they request an increased limit directly, or can we, as a validated EMM solution listed in the directory, do this on their behalf?3. Waiting time: What is the usual waiting time for a request to increase the quota limit?Thanks,Marko

Our ZTE partner Motorola has created a Zero touch account for our company, but when we try to access the portal (https://enterprise.google.com/android/zero-touch/customers)  we get an error 403 that we do not have access. Also when accesing the "Manage zero-touch devices" setting inside the "Enrollment" sub-menu we get an server error. We already had a ticket with them and we went through the sttings tigether, but we didn't find the underlying issue and the reseller suggested we contact Android Enterprise support. We also checked that the email address was the correct one, and we also got an email from the android provisioning service that "Motorola has created your zero-touch enrollment account"  

Can we restrict use of mobile network and only allow use of WIfi using android management APi policy

Hello I currently have one client with 1000+ devices. Sometimes, there is need to deregister sopme devices (for example when they are send to repair). Is there any faster way to mass deregister devices from ZTP than searching them one by one? I mean, sometimes it is 50, or even 100. Do I have to search each device individually one by one, or is there any automated option to do it?

I submitted my application for Android Enterprise Mobile Management for my company, but it was rejected. Please help me understand the reasons for this rejection, or assist me in obtaining approval. Alternatively, let me know the requirements for that. 

Is anybody having issues onboarding devices into their EMM? We are getting a lot of issues where devices are getting stuck at "Updating device" (see picture below), and it has been like that since approximately Jan. 27 2025. Behavior looks similar to the current report that was recently sent and that announces a fix for the issue but we are still experiencing it on our end. "Customers may experience device provisioning failures for devices managed using the Android Management API. This outage only affects devices with a policy that includes apps with ‘installType=REQUIRED_FOR_SETUP’ in the APAC region. Affected devices will stall at the ‘Install work apps’ screen, with a continuously spinning progress indicator. The Android Enterprise team is aware of the issue and a fix was released to resolve the issue as of 18:00 GMT 31 Jan 2025."

Hello everyone,In the last few days, we have noticed that when a device is set up via ZeroTouch and the restore function is used from an old device, we receive a message that the device has not been set up properly and that it will automatically reset itself in 2 hours. This only occurs if the restore function is used before connecting to the WLAN. There you can scan a QR code with the old device so that the data is transferred. The set-up process then also runs through so far, only the device is then automatically deleted after 2 hours.If you do not use the restore function that is displayed at the beginning and you use the restore function at the end of the setup process, the error does not occur.Is this a known problem or should the error not actually occur?The latest Android 14 version is used on the devices. The MDM system used is intune.

I would like to know if there is a way to keep the mobile data always on / turned off, as we are receiving requests from our customers stating "the users should never turn off their mobile data". They want their user's device to be connected with MDM all the time. 

Hi all,we have many Motorola with Android 14 and the follow wifi configuration:EAP method: TLSCertificate CA: trusted certificate from our Microsoft CA serverdomain: the FQDN of the CA serveruser certificate: the user certificateidentity: the user identity With this configuration the wifi connection failed the authenticationIn the past, we used TOFU (trust on first use) or "not validate" option instead of the Certificate CA and it worked, but now the "not validate" is no more available and TOFU no longer works Is there a way to fix the issue? 

So we usually setup AFW devices for our staff for their own use. Now there is a scenario where we have 2 members of a team with rotating shifts that fill 1 role. We would need to configure the same phone for both users, but we don't want their Microsoft account/apps to get mixed together or exposed to the other. Is there any configuration to do so?

Hello. I found this forum while doing research on the internet, I hope I'm posting in the right place, I'm not very familiar with forum culture. 2 days ago, we bought a second-hand phone for my nephew to play games. The phone arrived and I was setting it up. While creating a new Gmail account, it directed me to the verification page and asked for SMS confirmation. There is no SIM card in the phone and it's setting up for the first time? I couldn't figure out how to overcome this situation and what I need to do. Can you help?

Why I havn't got cutout option on my instagram?

Hello, I have a problem with communication with Google services because some FQDNs from Google are blocked. The problem is during downloading applications from Google Play... there are still pending downloading. Could you please share with me the correct FQDNs that should be allowed for working communication? We use: Zebra/Honeywell scanner + Intune Enrollment + Zscaler At this moment we have exclusion for this purpose:*.ggpht.com*.gstatic.com*.gvt1.com*.gvt2.com*.gvt3.com*.mtalk.google.com*.time.google.com108.177.104.188142.250.115.188142.250.145.188172.217.218.188173.194.65.188android.clients.google.comandroid.comchromiumdash.appspot.comconnectivitycheck.android.comconnectivitycheck.gstatic.comdl-ssl.google.comdl.google.comgoogle-analytics.comgoogle.comgoogleusercontent.complay.google.com and ports: httpsntpquictcp-high-portstcp5228-5230udp-123 Please help us 🙂