Android Enterprise General Discussions

We have the Android devices enrolling via ZTE and configs.  But, my client is asking if there is a way to skip the Google account screen without relying on the user to click skip.  We do have a Device Restriction policy that will take effect after enrollment is complete that will block Google accounts.  But, they are asking if there is a way to not display this screen at all during ZTE.  Thanks!

I have an app that is Externally Hosted on Google Play Console - it was set up to use the JSON config file and was then linked through to the organisation's MDM platform. However, the app is now too big to use this method, so we had to upload the APK directly to Google Play Console. This is obviously not best practice, but we cannot upload an app bundle because we are an externally hosted app - "To upload an Android App Bundle, you must be enrolled in Play App Signing". BUT when we attempt to enrol in Play App Signing, the following error is displayed:App signing isn't availableWe can't protect your app signing key. This is because:· we don't support apps with externally hosted APKs Is there any method to convert an app from externally hosted? We are not in a position to create a new app and ask users to re-download it.

I am trying to connect a Managed Google Play account to Intune so I can use Android enrollment. As of this article: Connect Intune account to managed Google Play account - Microsoft Intune | Microsoft Learn - As of August 2024, you can link your Microsoft Entra identity account to a Google account, instead of using an enterprise Gmail account. I am therefore trying the bind with the *@domain.onmicrosoft.com account, which is correctly identified as Microsoft account and offers to use it, but at the end I am getting:   Something went wrongYour account wasn't created  I have of course tried to clean browser cache, incognito window, etc. nothing works. If I try to login to admin.google.com Console, says that account does not exist.  Thank you

Error "This account already exist on your devices" when I try to login same Google account (GSuite) in both personal and work profile. Anyone facing the same issue and what is solution?

Background:We are looking for options to configure a standard google account for 'find my device' option on Corporate Android devices from EMM. This way we can sign-in to one account, see all associated devices & send track/remote lock commands to the device from a single place. Question:1) Does Google provide EMMs with options to let admins configure enterprise google account for 'Find my device' on Corporate Android devices?2) If yes to (1) , can Admins use the same google account configured for Android Enterprise binding to also configure 'Find my device'?

Hi Android Enterprise community ! As an IT professional with focus on securing and managing different types of devices for customers all over the world, its important to keep up with the changing landscape and be on top of whats going on in the different ecosystems that exist out there. In this post I want to highlight 3 things that I think has had the greatest impact for me and my customers and that I would recommend anyone working within this field to keep an eye on. Android Enterprise Community discussions highlights   There have been a lot of great conversations in this community for the past year and I wanted to mention a few that stood out for me and the impact of the community. I'm a strong believer in that whats makes a great product is also the community around it. Being able to interact directly between users using the product, developers and Program Managers working on the product makes the product better. https://www.androidenterprise.community/t5/general-dis

I’ve been hearing a lot about AI in mobile phones lately, and I’m kind of confused about how it’s different from the usual smart features that Android phones already have. Like, I know Android has stuff like Google Assistant, face unlock, and all those smart options, but then there’s this “AI” term being thrown around everywhere. What’s the actual difference? Is it just a fancy name for features we’ve been using, or does it really add something new? I’m not super tech-savvy, so if you guys could explain it in simple terms or share your thoughts, that’d be great. Maybe even some examples of AI in phones?

If an Android device has work profile (user 10), user 0  have an app can be logged in by  a 3rd app which installed in both user 0 and user 10. When i start the app and call 3rd app to login, how can i to start the ResoverActivity with 3rd app in user0 and 3rd app in user 10?

Hey everyone,Google removed the option to distribute paid apps some time ago.We loved that feature to roll out paid apps like ZoiPer Pro and many more.Are there any plans to get this awesome feature back? I already asked about it at the Android Enterprise Global Partner Summit 2022:Do you have any updates for us?

Hi there , I am working on developing an app for which I want to use Zero-Touch enrollment. I am a learner and trying to implement my idea . So I dont have any registered company to have a D-U-N-S number as I am building it on a personal level . I want to test Zero touch on my personal spare android device , but I cannot enroll on ZT portal because it requires registered company details. So is there a way for learner to start with this ZT without having an organisation ? Any assistance would be highly appreciated. Thanks in advance

There's a bug in the following sections which blocks ending the activity:Android Enterprise Expert > Android Enterprise Support Engineer Policy Troubleshooting > New application requirement > Bug ReportThe issue is the correct option "DUMP of Service Policy" acts like "DUMP of Service account" which makes all the three answsers wrong so the activity can't be finished. So you can't proceed with the activities and you can't sign up for the certification!!This is very stupid as either you should make sure that all the options work correctly, or don't block the rest of activities in case of unfinished questions! Now I'm blocked indefinitely!

Hello Can I add work profile for my device if I do not have a work email. I sjut need it for my self to arrange and separate files in my device

I have a few questions regarding the capabilities and limitations of AMAPI for fully company-owned and managed devices:Granting System-Level Permissions:Is it possible to grant system-level permissions (protected permissions) through AMAPI? Alternatively, can the companion app be converted into a system app via policy?Use Case: Enabling call recording, which requires the CAPTURE_AUDIO_OUTPUT system permission.Current Solution: Rooting the devices and making the app a system-level application.Granting Special Permissions to Applications:Can special permissions like AppUsage, System Alert Window, Notification Listener, Full Storage, Screen Capture, or Accessibility be granted via policy?Use Case: Features like monitoring, productivity analysis, and remote control rely on these permissions.Current Solution: Using su commands and an extension app to manage these permissions.Enforcing Default Applications:Is there a way to enforce and set default apps (e.g., default dialer / phone) via poli

What are some cool but underrated Android Features on Android that most people don’t know about? those little things that make life easier but don’t get talked about much. I feel like there’s so much hidden stuff in Android that we miss out on.

Can you please support for this issue. We have not been able to call the following api: We have executed all the steps mentioned in documents, still getting 403 GET https://androiddeviceprovisioning.googleapis.com/v1/partners/*****/customers { "code" : 403, "errors" : [ { "domain" : "global", "message" : "You are not allowed to retrieve the list of requested permission delegations.", "reason" : "forbidden" } ], "message" : "You are not allowed to retrieve the list of requested permission delegations.", "status" : "PERMISSION_DENIED", "details" : [ { "@type" : "type.googleapis.com/google.android.device.provisioning.v1.CustomError", "code" : "AUTHORIZATION_FAIL", "message" : "AUTHORIZATION_FAIL" } ] } To get the device listing for a customer we have followed below pre-requisites: A Google account, that's a member of your zero-touch enrollment reseller account. Java 1.7 or greater.(21) enable Android Device Provisioning Partner API. create a service account. Set Role to Service Accounts &

Hi, i want to get in touch with android enterprise over a month now, but i don´t get a answer. I filled out this form (https://www.android.com/intl/de_de/enterprise/get-in-touch/) 4 times and did not get any response.  I want a Enterprise Solution for a very small company with 4 employees to install a work profile on their own devices. I appreciate any help to get startet. Thank you, Robert.

While implementing the Android Management API to configure a critical application as FORCE_INSTALLED, I encountered a significant issue. Under normal circumstances, this configuration prevents users from uninstalling or disabling the app, displaying an "Action not allowed" message when such actions are attempted via the device settings.However, When the user long-presses the app icon on the launcher, the "Disable" option becomes available, and selecting it successfully disables the application. This behavior undermines the intended enforcement of the FORCE_INSTALLED policy. Moreover, when trying to enable the application, the "Action not allowed" message is displayed.Steps to ReproduceConfigure an application in the policy with the following parameters:"applications": [ { "packageName": "com.example.app", "installType": "FORCE_INSTALLED", "allowDisable": false } ]Apply the policy to a managed device.Attempt to disable the application through the device settings; the act

We are working on an established Intune deployment and have discovered a Managed Google Play account that was set up by an employee who is no longer with the company. So I have some questions and general confusion around Managed Google Play vs Android Enterprise and what would be best for our Org.1. I can see that we need to move away from Android (device administrator) enrolments based on the documentation from Google/MS. If I disconnect the current Managed Play account, I am concerned that these devices would be impacted. I'm not sure if we can blow away this connection, set up a new account, or really try to get access to the current account.2. Is Managed Google Play the same as Android Enterprise? Or are those 2 completely different things?3. The devices in our Org will be either BYOD Androids and Android-based conference room gear (that the company owns), polycom phones, displays, speakers, etc. Do we/ should we use Android Enterprise to manage both of these types of devices?

Hello, Until earlier today, I was able to upload existing devices via .csv with a view to changing their configurations. This is because our resellers are unable to choose which configuration to use upon upload (we have two for different types of devices).Despite simply trying to change configurations for existing devices, I'm getting the error "You don't have permission to add devices for the customer". As I mentioned, this was working earlier today, all of a sudden I'm now unable to do this for devices that already exist in the portal. I'm using the .csv template provided with "modemtype", "modemid" and "profileid" filled out, which had been working. For now I'm having to do this manually for devices. Any help would be much appreciated.

 Hi, allI'm trying to modify our original enrollment token (Intune - Fully Managed Device QR Code) so that the device can enroll using mobile data OR any wifi network.I managed to add this to an existing QR codeandroid.app.extra.PROVISIONING_USE_MOBILE_DATA":true,Unfortunately, using such a QR code on a phone that does not have mobile data transmission means that the enrollment process no longer asks for the WIFI network and ends in failure.To sum up, I want to create an enrollment code that works as follows:1. Allow enrollment using mobile data.2. If mobile data does not work - ask for any WIFI.

Hi All, I want to implement VPN capability in my EMM Console, But I am unable to find the reference JSON in the google developer site, nor any comprehensive guides on the subject. I have one option that allows me to enable or disable the VPN, I want to build the complete VPN capabilities in the Console using Android EMM APIs. Can some one help?@Lizzie @jeremy  Thanks,Farkhaleeth 

After registering a device in the portal and linking it to an enterprise using the enterprise ID, I deleted the enterprise. However, the device status remains as “already linked,” preventing me from linking it to a new enterprise. @jasonbayton 

Hi,I created an Android application that has to run on a fully managed device.I have to make it the only application installed on a device and running on a Kiosk Mode.I tried provisioning the device using QR Code, to do it I do the following: Created an activity extending DeviceAdminReceiver.   import android.app.admin.DeviceAdminReceiver class AdminReceiver : DeviceAdminReceiver()    Added it into the manifest:    <receiver android:name=".kioskmode.AdminReceiver" android:exported="true" android:label="@string/app_name" android:permission="android.permission.BIND_DEVICE_ADMIN"> <meta-data android:name="android.app.device_admin" android:resource="@xml/device_admin" /> <intent-filter> <action android:name="android.app.action.DEVICE_ADMIN_ENABLED" /> </intent-filter>

Hi all, I inadvertently removed the owner account from the Zerotouch portal for one of our customers, when I was setting up his google account (the link was destroyed when we created it). There was only 1 owner set (we are only admins), so we are unable to do it from our side as there are no other owner accounts. Is there any way to add at least one owner to this account again? Or can you send me any contact to the support? Thank you for your help.