Android Enterprise General Discussions

We have Zero Touch and use Intune. We do not have Intune linked to Zero Touch. We created a configuration in Zero Touch.  The devices should enroll as fully managed. Several devices are successfully enrolling as fully managed however, some are being prompted to set up a work profile rather than enroll as fully managed.  It doesn't seem to be consistent as to make, model or OS version.  All of the devices below are in Zero Touch and should have been enrolled as fully managed.  They all point to the same configuration in Zero Touch. Also, some devices prompt for work profile setup but then only go so far before endinto a screen that says the device cannot be setup. Any insight or advice would be appreciated. Thank you, Nancy 

Hello, we have problem with notifications on from workprofile on smartwatches. It works 1month ago but from Sept. we don't receive any notifications from Outlook, MS Teams, etc.Somebody knows what happens? Thanks! 

Hello everyone,   I hope you are doing well.    Speaking with many of you, I know testing your devices, applications, configurations and all the other things that go into a managed solution can be a time consuming process. Especially if you have multiple types of management mode and device types to the mix as well.   Based on this, I thought it would be an interesting discussion point for us all here in the community. Do you any tips or processes you have perfected around testing? Perhaps you have a checklist of things you follow? Or a timeframe that you allocate to test certain areas or a minimum number of devices you test things on before rolling it out more widely?    It would be great to hear from you.    Thanks, Lizzie

ℹ️This is my first post on these forums, so apologies if this is in the wrong place, or directed at the wrong crowd. We have an accessibility service which we use for government agencies in the UK. We deliver this through a Private Managed Play Store (using their Organisation ID for sharing). It is delivered by their MDM, which is usually MS Intune. One of our customers has asked us to provide support for Managed Configurations so they tie the device with the owner - information which can be provided into Managed Configurations via Intune variables , which seems like a great idea. However, I believe their may be an issue with the Work Profile and applications which offer an Accessibility Service - in that, when you install the app on the Work Profile (required to use managed configurations), our accessibility service does not appear in the list in the Settings menu. If you install the app on the Personal profile, it does show. I suspect whatever container-is

My requirement is to add a string pattern in urlblocklist and the result is to block the entire URL that contains this pattern. Is it possible through AMAPI managed configuration of chrome? I appreciate any help you can provide.

Hello all, I am new to the forum so hopefully I posted in the right location. I have a question about Samsung devices (ex. A22, A53, etc.) in a business scenario of a healthcare provider. When a new (COPE) device gets ordered the devices comes preinstalled with an Android version, the device goes in stock and a few months later an user needs a new one. We would like to preinstall periodically the latest version so that the rollout/handoff of the new device takes less time. Current scenario is that the user comes, we take a phone out of our stock, during the OOBE setup you first have to login with a Google or Samsung account before updates get installed. The installation of updates sometimes takes over an hour during this time the user has to wait, or they have to come back. We also have lots of iPhones and we update them with a MacBook. We are looking for a simular solution but I cannot think of one, so I thought lets ask others. Maybe someone has a brilliant idea. 

EMM API enterprise Not supporting AM Api feature API's. But AM Api Enterprise supporting some of the EMM api features. why? is there any way to support AM api with EMM api enterprise ID

Not sure where else to turn. I have an AndroidAtWork profile on my personal device through my company. I was getting a message saying that my password was going to expire soon. At a certain point the device said that the password expired. Now when I enter my 8 digit passcode to open the device it says "The password expired. You must change the password to continue using this device." When I hit OK it just returns me to the passcode screen and I am effectively locked out of my device. I've been working with our internal support and they have tried to push a policy eliminating the passcode requiurement but it hasn't had any effect. It appears that the new policies are not taking effect. To anyone's knowledge is there some way to disable the passcode or enable some way for me to reset it? Or some other solution?  The device is still checking in with the host. Is there any chance that the passcode would be eliminated or I would get an option to reset the passcode if the devi

We have some devices registered on the Zero Touch portal that belong to the organization, and whenever we signed up for an enrollment configuration, since this device was not configured in our EMM, it would request a factory reset with a message saying that the device belonged to organization X and would be formatted within 2 hours. But that stopped working. Does anyone know if anything has changed in the Zero Touch portal's ownership policy? 

App code/function will similar but educational content will different. Now I want to know is it safe for console?

Greetings, Just started on our MDM journey and wanting to see if we have the correct 'type' of account based on https://support.google.com/work/android/answer/6371476?hl=en#zippy=%2Cmanaged-google-account  ?Keen to have a chat as we have bought NinjaOne MDM to run on 25 Samsung Tab 9's (SM-X115) running Android 14, but not able to configure some features.

Hello,I am trying to set the forcedResetTime field that is mentioned in the "Google device provisioning services" documentation: https://developers.google.com/zero-touch/reference/customer/rest/v1/customers.configurations#ConfigurationBut, the problem is, I can't set this value through the Zero-Touch portal, the configuration form that is available on the website does not have this optional field.So, is there a way to set this value through the portal? If so, where can I find this field to edit? If not, is there any other way or EMM that I can use to set this value?Ref.:Thanks,Eduardo.

Hi, a customer of ours who we deploy our app to through their private play store is getting the following error:The application can’t be installed because it is incompatible with the device. (0xC7D24FBC)This appears to be an InTune error (i have been given very little info myself).  Googling the error message suggests that they try to install the apk manually rather than through their MDM/private play store.  They have tried this and it works.  I have also downloaded the apk created from the play console and have manually installed it on an identical device (Samsung Galaxy A8).  It is then suggested that if this is possible to contact Google.The app fails to install in both the countries it is targeted at with this error.Has anyone seen this error before and if so any idea how to fix it?

@jasonbayton @jeremy @Lizzie Guys, I am trying to implement the managed configurations for Android public applications, but my team cannot get how we can add lookup values to the app? is there any document I can refer to? I have this, but it tells me how to get the lookup values. https://developers.google.com/android/management/reference/rest/v1/enterprises.policies#managedconfigurationtemplatePlease let me know if any of you can help to solve this issue 

 Hi Team, I’m looking to implement a VPN profile in our EMM portal but haven’t found any relevant references on the developer portal, nor any comprehensive guides on the subject. Could anyone point me in the right direction for documentation or resources? Thanks in advance for your help! Best regards,Farkhaleeth

In the managed Google Play store, you have 3 different application types:Managed Google Play store appManaged Google Play private appManaged Google Play web appThe managed Google Play web app generates an APK that is listed after a couple of minutes between your other native apps. When using it from an end user perspective it opens in Chrome.Anybody knows what exactly is used behind the scenes. I searched the docs but could not find any info.Is a Trusted Web Activity generated behind the scenes? What about lifecycle management of the shell, does Google the housekeeping for me to target new android versions for the shell or do I have to generate a new APK?

We have a number of customers using MAM-only, with App Protection policies for BYOD devices.  Android apps are assigned as "Available with or without enrollment", but are not showing in the Company Portal when the user sign-in.  Because the apps aren't in Company Portal, the App Protection doesn't get applied. If I assign a web-link app to the users, that does show in Company Portal. This seems to have only started recently, was working a couple of months ago. Just wondering if anyone else is seeing this?  

I have successfully binded the managed play store accoount to Intune.After an initial enrollment of a first Samsung Android smartphone (as personally owned device with work folder) to Intune, the Intune app list already shows four Microsoft apps  (Home Screen, Authenticator, Intune, Company Portal) as assignable apps. I don't know if this behaviour could be considered as normal, because at this early time I have not yet selected them in the managed play store to be synced to Intune app list. Another curiosity is that none of these apps could be deleted from the Intune app list (delete button is greyed).If I then continue to select some first apps in the managed play store to be synced to the Intune app list, nothing happens after launching the sync process. None of the selected apps will be synced to the Intune app list.Of course these selected apps also do not appear in the company portal app management. What can I do to get this failure fixed ?Actually this means that I can

Hi, I'm Sharonbliss and I'm new here

Hi, I am using Android Management API to develop MDM solution. The main feature is customization Kiosk launcher and there is a solution in Android Managemen API. It's working very well.https://developers.google.com/android/management/reference/rest/v1/enterprises.policies#installtypeThere is a requirement about exiting Kiosk launcher offline.   I think it's the common use case but I cannot find any solution to finish it. (lockTaskAllowed item is deprecated....) Is there any way to do this? Note: My production need customization kiosk launcher so the "kioskCustomLauncherEnabled" cannt be used.

I just bought a pixel tablet off of eBay, and I'm getting the message that this device belongs to an organization. I reset the device, but no luck. Please assist. Thanks!

We are developing a Device Management Solution but our customer range strictly forbids the use of google cloud apis which makes the Android Management API not viable for us.And as creating an own DPC is deprecated/discouraged i am very confused on what the process for achieving our goal is. Any advice is greatly appreciated. 

Hey guys The title says it all. I want my customers to be able to see their device name on the lock screen, when using the kiosk custom launcher.Our customers can only see the device name when they restart the phone. If they lock the phone normally, it doesn't activate the keyguard. Is there a possibility to have this fixed? Regards

Hello community.I'm opening this post because a customer is experiencing an issue with private apps and webapps uninstalling and not reinstalling after a device migration from one EMM to another.The source EMM is Ivanti Endpoint Mobile Manager (formerly MobileIron Core) and the destination EMM is Ivanti Neurons for MDM (formerly MobileIron Cloud).Ivanti has developed a migration tool between Core and Cloud. Web apps that were present in Core have been recreated in Cloud, but when devices migrate, web apps uninstall and do not reinstall. Only newly enrolled cloud devices can install web apps. Do you know the cause of this problem and if there is a solution other than re-enrolling the migrated devices? Regarding private applications, MobileIron/Ivanti support told us that it is necessary to retrieve the Google company id from the Cloud and integrate it into the google play developer console of the Core for each private application that was present in the Core.However, when the

Hello. Maybe someone have solution for this.We bought some time ago Lenovo K11 tablets and our reseller added them to our ZT account.Now I wanted to enroll them, so I created everything in Sophos MDM and created config in ZT.When I assigned profile to devices and did factory reset then nothing happens. Tablets don`t see any profiles and let me configure as a normal user. Tried on different networks, created new configs on ZT and on Sophos side and nothing. In other post one user said that I should ask reseller to re-add devices to ZT but they can`t until next two weeks so I`m searching for another solution Any tips fo me?