Android Enterprise General Discussions

 Hi Team, I’m looking to implement a VPN profile in our EMM portal but haven’t found any relevant references on the developer portal, nor any comprehensive guides on the subject. Could anyone point me in the right direction for documentation or resources? Thanks in advance for your help! Best regards,Farkhaleeth

In the managed Google Play store, you have 3 different application types:Managed Google Play store appManaged Google Play private appManaged Google Play web appThe managed Google Play web app generates an APK that is listed after a couple of minutes between your other native apps. When using it from an end user perspective it opens in Chrome.Anybody knows what exactly is used behind the scenes. I searched the docs but could not find any info.Is a Trusted Web Activity generated behind the scenes? What about lifecycle management of the shell, does Google the housekeeping for me to target new android versions for the shell or do I have to generate a new APK?

We have a number of customers using MAM-only, with App Protection policies for BYOD devices.  Android apps are assigned as "Available with or without enrollment", but are not showing in the Company Portal when the user sign-in.  Because the apps aren't in Company Portal, the App Protection doesn't get applied. If I assign a web-link app to the users, that does show in Company Portal. This seems to have only started recently, was working a couple of months ago. Just wondering if anyone else is seeing this?  

I have successfully binded the managed play store accoount to Intune.After an initial enrollment of a first Samsung Android smartphone (as personally owned device with work folder) to Intune, the Intune app list already shows four Microsoft apps  (Home Screen, Authenticator, Intune, Company Portal) as assignable apps. I don't know if this behaviour could be considered as normal, because at this early time I have not yet selected them in the managed play store to be synced to Intune app list. Another curiosity is that none of these apps could be deleted from the Intune app list (delete button is greyed).If I then continue to select some first apps in the managed play store to be synced to the Intune app list, nothing happens after launching the sync process. None of the selected apps will be synced to the Intune app list.Of course these selected apps also do not appear in the company portal app management. What can I do to get this failure fixed ?Actually this means that I can

Hi, I'm Sharonbliss and I'm new here

Hi, I am using Android Management API to develop MDM solution. The main feature is customization Kiosk launcher and there is a solution in Android Managemen API. It's working very well.https://developers.google.com/android/management/reference/rest/v1/enterprises.policies#installtypeThere is a requirement about exiting Kiosk launcher offline.   I think it's the common use case but I cannot find any solution to finish it. (lockTaskAllowed item is deprecated....) Is there any way to do this? Note: My production need customization kiosk launcher so the "kioskCustomLauncherEnabled" cannt be used.

I just bought a pixel tablet off of eBay, and I'm getting the message that this device belongs to an organization. I reset the device, but no luck. Please assist. Thanks!

We are developing a Device Management Solution but our customer range strictly forbids the use of google cloud apis which makes the Android Management API not viable for us.And as creating an own DPC is deprecated/discouraged i am very confused on what the process for achieving our goal is. Any advice is greatly appreciated. 

Hey guys The title says it all. I want my customers to be able to see their device name on the lock screen, when using the kiosk custom launcher.Our customers can only see the device name when they restart the phone. If they lock the phone normally, it doesn't activate the keyguard. Is there a possibility to have this fixed? Regards

Hello community.I'm opening this post because a customer is experiencing an issue with private apps and webapps uninstalling and not reinstalling after a device migration from one EMM to another.The source EMM is Ivanti Endpoint Mobile Manager (formerly MobileIron Core) and the destination EMM is Ivanti Neurons for MDM (formerly MobileIron Cloud).Ivanti has developed a migration tool between Core and Cloud. Web apps that were present in Core have been recreated in Cloud, but when devices migrate, web apps uninstall and do not reinstall. Only newly enrolled cloud devices can install web apps. Do you know the cause of this problem and if there is a solution other than re-enrolling the migrated devices? Regarding private applications, MobileIron/Ivanti support told us that it is necessary to retrieve the Google company id from the Cloud and integrate it into the google play developer console of the Core for each private application that was present in the Core.However, when the

Hello. Maybe someone have solution for this.We bought some time ago Lenovo K11 tablets and our reseller added them to our ZT account.Now I wanted to enroll them, so I created everything in Sophos MDM and created config in ZT.When I assigned profile to devices and did factory reset then nothing happens. Tablets don`t see any profiles and let me configure as a normal user. Tried on different networks, created new configs on ZT and on Sophos side and nothing. In other post one user said that I should ask reseller to re-add devices to ZT but they can`t until next two weeks so I`m searching for another solution Any tips fo me?

The WhatsApp Business app, installed only on my work profile, doesn't notify me when I receive an audio call through the WhatsApp application.If I receive a message on WhatsApp, the notification works normally, but I don't get any notification for calls.I've already checked all the call notification settings;I've also checked the caller.I would like my phone to ring when someone calls me via WhatsApp Business.(Detail: the phone only vibrates, but there is nothing on the screen, and no sound, it just vibrates.)

Documentation recommends creating Google Cloud Service account keys and passing the key to createResellerService[1]. This appears not to be best practice from a security perspective[2]. Are there other keyless authentication options like Workload ID federation etcResellerService samsungResellerService = SamsungResellerServiceFactory.createResellerService(resellerId, serviceAccountKeyFilePath, clientIdentifier); [1] https://developers.google.com/zero-touch/guides/reseller-library/common-operations#create_resellerservice_objects[2]https://cloud.google.com/iam/docs/best-practices-service-accounts#service-account-keys 

Hi everyone. We have implemented in 7P into our DPC the EUICC download subscription feature and we have been able to configure an eSIM with an activation code. However, in our discussions with esim carrier providers, it seems that they are requested us to provide the EID which identifies the eUICC hardware. However, the EuiccManager.getEID can't be use by our DPC. Is there any alternative way to obtain this ID? Thanks in advance and best regards Jesús

I would like to eliminate the Personal Profile Environment so that the fully managed device does not allow "personal" apps such as Chrome, Store, Etc. I would like the device to be fully managed by the company in such a way that there are no "personal" apps. I'm using Google Admin advanced management, but when I restore the phone it is automatically creating two environments. Is it possible to have the "work" environment only?Thanks!

Hi All I am working on Device actions/Commands  and I wold like to know which commands are applicable to BYOD and COD Commands:Lock. Reset PasswordRebootWipeClear App DataEnable Lost ModeDisable Lost ModeRemove Work Profile Regards,Farkhaleeth 

Hello everyone,   I hope you are having a great start to your September.   Considering what device management option(s) will work best for your company and employee needs is an important undertaking. From strictly controlled devices to more flexible setups, you’re able to choose the management type that best aligns with your goals and the way your employees use devices.   Here in the community we often see questions on this area and so I thought similar to our discussion on choosing a EMM, many of you have been through this experience (and continue to consider this). It would be fantastic to hear your community tips and advice.   What tips would you recommend to someone considering and researching which particular management option to implement? How did you choose the best fit for your business needs? What are your main considerations?If you are currently going through the process, please do comment too, it would be great to hear from you. &nbsp

Hi everyone,I'm facing a challenge with device check-ins and status reports in our Android Enterprise setup. I have two key questions:Is there an existing Google API that allows us to force a device to check in or provide its status immediately upon request?How long does it typically take for a device to send its last status report to Google, and is there any way to reduce this delay or trigger an immediate report?We’re looking for a way to ensure that devices update their status in near real-time when needed. Any guidance or best practices on controlling device check-ins or reducing status report latency would be highly appreciated!Thanks in advance for your help.Best regards,Zoe

Hi All, I would like to know when we select the application from iframe, can we assign to the devices in the same flow or we have to create a policy to assign the app to devices  https://developers.google.com/android/management/reference/rest/v1/enterprises.applications  this doesn't talk about the assignment of the way the app should install on the device silent or not ? Regards,Farkhaleeth 

How do I report someone abusing Android Enterprise/Google MDM services. I'm in desperate need of some help! I'm being stalked by my father in-law who is using these services to access and control my devices/accounts. Several times, I have contacted my local police department in attempt to file a report and each time being denied. I have also made a report on ic3.gov, called the FBI twice, went to the State Attorneys office, and contacted Samsung and my phone carrier (T Mobile) numerous times. All without any advice or attempt of offering some sort of resolution. This has and still is seriously affecting my life. I'm have never been so frustrated and felt so helpless in my entire life. I desperately need some advice/help!! 

I unenrolled from an Android Enterprise Academy activity.How do I undo the unenrollment?

Hi  I am creating a profile for AE on my EMM console Is there any document available to refer to which profile policy applies to the type of enrolled device (profile owner/device owner). I would like to know how I can understand whether a specific profile applies to a work profile. Example: Disable camera restriction policy ( is it applicable to both BYOD and COD?) and which OS version it is supported? Regards,Farkhaleeth 

Hi All, I have a query regarding the Private Key rules policy, where and how this can be used?https://developers.google.com/android/management/reference/rest/v1/enterprises.policies#chooseprivatekeyrule Regards,Farkhaleeth 

Hey All, I hope you all doing well! We are OEM Manufactures based out of Seoul South Korea and we are building our own EMM Solution. Does any one suggest how we can create our own AFW# enrolment token? Is there AMAPI specifically available for this process?

Hi Lizzie I am seeing this exact problem now.  I have added a number of apps to our managed Google Play store but some users cannot see all of the apps assigned to them -- of 4 apps added last night, some users see all 4, some only see 3, a few see only one.  All apps are set to show for All Users.   Anything to do?   *[Moved from another thread and made into a new topic - new title given]