Android Enterprise General Discussions

اريد 

First, do Android support using Fido2 keys on Android?Yes, it does support both using bluetooth, NFC and USB authentication.For reference: https://developers.google.com/identity/fido/android/native-apps But does it mean that it is straight forward to use it in a enterprise environment without hiccups?No, the support lacks many features that both Windows and iOS has supported for long time. If I buy a modern Fido2 with OTP support, will it work straight out of the box for using the USB?No, you need to disable the OTP support first. Here is how you can do that from yubikey manager, this works for Yubikey.Other vendors might have something similar. But for Fido2 keys without OTP support, it should work out of the box for USB-C, like Google titan.  Why this happens, dont know.Can we use NFC for Entra ID authentication like we can on Windows and iOS?No. Android does not currently support CTAP2 for NFC, only for USB-C input. CTAP1 (FIDO U2F) supports certificate based authenti

How I can disconnect linking with my it admin because my phone linked when I try connecting with my computer work

Hello, if I am a manufacturer, how to install Android for devices that I have created?

Hi everyone,I’m working with managed Android devices in a business environment and have noticed some performance issues during certain workflows.When users perform browser-based tasks that involve file handling (such as uploading or processing documents), the device performance drops noticeably.Some common observations:• Browser becomes slow or temporarily unresponsive• File uploads or processing tasks fail midway• Devices heat up during extended usage• Multitasking between apps affects overall responsivenessIn one case, while testing a browser-based tool for handling documents:PDF Online Editor or Amazon KDP Formatterthe experience was smooth on desktop but less stable on managed Android devices.Environment:• Android Enterprise managed devices• Work profile enabled• Standard browser usage (mostly Chrome-based)• Mixed device configurations (mid-range hardware)What I’ve tried:• Limiting background apps• Testing on different network conditions• Updating system and apps• Comparing managed

Learn more about the changes to the new zero-touch customer portal   The new zero-touch customer portal has been designed to make it easier for you to manage your account. Here are some of the key changes: New look and feel: The portal has been redesigned with a modern look and feel, making it easier to navigate and find the information you need. Improved navigation: The navigation menu has been simplified and reorganized, making it easier to find the pages you're looking for. Updated Terms of service: Updated the zero-touch customer terms of service and customers will be prompted to accept the terms of service upon next login to the zero-touch customer portal. The terms of service need to be accepted once by an admin or owner of the customer account. If you own multiple accounts, you might need to accept the terms of service for each one. Note: when attempting to access the zero-touch customer API. Any existing solutions leveraging the zero-touch customer APIs to access an acco

Not able to find m google account in manage play on Intune enrollment

Overview:Currently, robust device locking systems like "Samsung Finance+" or high-end MDM (Mobile Device Management) solutions are only accessible to large leasing corporations or big enterprises. There is a massive global market gap for a built-in, universal Android feature that allows small-to-medium enterprises (SMEs), schools, and small businesses to secure hardware sold on credit or loaned to users, without compromising user privacy.​The Problem:​Security Risk for SMEs: Small sellers who offer installment plans (credit) often lose assets because there is no native way to lock a device if payments stop.​Privacy Concerns: Current workarounds (like using Family Link) force sellers to have access to the buyer's account, which exposes private data (Search history, Photos, etc.).​Inconsistency: Existing solutions are fragmented and brand-specific.​Proposed Solution: "Google Device Secure-Lock"A native Android service that separates "System Ownership" from "Data Access."​Key Features:​Ha

I’m trying to connect Intune with Android Enterprise by following the instructions here: Connect Intune account to managed Google Play account - Microsoft Intune | Microsoft LearnHowever, when I’m prompted to sign up for the Google Admin Account and I enter my work email address as instructed, I get this error: “Email address is associated with an existing consumer account. Please use a different email.”I don’t understand what I am supposed to do here. I don’t have a “different email”. My work email address is my work email address.Thanks!

Hi there,I have a couple of Lenovo K11 wifi only models and the reseller has uploaded the serial number into our AZT account, the device has been assigned a configuration profile which is the same used for mobile phones.Problem i have is the tablets setup like a personal device and not a corporate owned, i’ve reset the tablet and had the reseller upload the serial number but still the same outcome.Intune isnt connected to our AZT account and i don’t know how else to troubleshoot this. The following “DPC extras” is what i used for the tablet setup{    "android.app.extra.PROVISIONING_DEVICE_ADMIN_COMPONENT_NAME": "com.google.android.apps.work.clouddpc/.receivers.CloudDeviceAdminReceiver",    "android.app.extra.PROVISIONING_DEVICE_ADMIN_SIGNATURE_CHECKSUM": "I5YvS0O5hXY46mb01BlRjq4oJJGs2kuUcHvVkAPEXlg",    "android.app.extra.PROVISIONING_DEVICE_ADMIN_PACKAGE_DOWNLOAD_LOCATION": "https://play.google.com/managed/downloadManagingApp?identifier=setup",    "android.app.extra.PROVISIONING_ADMIN

I had submitted the initial quota request through the Google Form, but I haven’t received any acknowledgement or response yet.As a developer in the early stages of an education startup, we’re looking to test our solution by deploying a small number of devices. However, due to the current quota restrictions, we’re unable to proceed with confidence.Could someone please assist us with this or help expedite the request?Thanks in advance.

We have a google account where it broke our intune connection this week. We tried to unbind then rebind and we cannot because the domain already exists and the primary account was the only admin account. That account was removed as the only admin with out our knowledge. We cannot seem to get any support on this issue and this a last ditch effort for help. Please help us!!

Hello,We have a managed Google Play store account linked to our Endpoint Manager. This account is a Microsoft one on our domain but we do not have a log of the password. Are we able to reset it without any negative effects on our enrolled devices?

我已经尝试过很多次为我的emm项目申请初始配额，但结果不是被拒绝就是没有回复，我们的业务只是为工厂和销售公司提供emm解决方案，我不清楚我们的业务哪里违反了谷歌emm服务的使用条款，我也尝试申请成为谷歌emm合作伙伴，但申请也被拒绝，请问一下我的问题应该向谁求助？(Translation added by ​@Kirk )Questions regarding Google EMM initial quotas and applying to become a Google EMM partner I have tried many times to apply for initial quotas for my EMM project, but the results are either rejection or no response. Our business only provides EMM solutions to factories and sales companies. I am not clear on where our business violates the Google EMM service terms of use. I also tried to apply to become a Google EMM partner, but the application was also rejected. Who should I seek help from for my problem? 

Hello,I hope you are doing well.We would appreciate your guidance regarding our application to join the Android Partner Portal.Our company is a professional reseller and integrator of enterprise mobility solutions, working with leading manufacturers such as Zebra, Datalogic, and Honeywell. We have extensive experience deploying and supporting Android-based devices for enterprise customers across multiple sectors.We are currently engaged in a significant project with a customer who plans to implement Android Zero-Touch enrollment at scale. In this context, access to the Zero-Touch portal is essential for us to properly provision, deploy, and support these devices in line with Android Enterprise best practices.We have submitted multiple applications to join the Android Partner Portal, but unfortunately, they have been declined with the following message:“We would like to inform you that your application to join the Android Partner Portal has been declined.After reviewing the information

Hello everyone,We recently hosted a session on Android Desktop Windowing for our CAFÉ & Insiders members! It was fantastic to hear directly from you about how your organizations are approaching connected display experiences.If you weren't able to attend (or are not currently part of either of these groups), please see the brief overview below. If you're interested in reading the full recap please join Insiders and let us know that you would like to be part of this project (or comment below). Existing Desktop insiders members can view the extended recap here.   What We Talked About:During the session, the Desktop Windowing team discussed the evolution of Android's connected display experience following its official General Availability launch in the Q1 2026 Android release. They went over the four product focus areas for their team, some upcoming features and areas of exploration for future versions of desktop mode. What We Heard:We got great feedback during the live Q&A session

In PROFILE_OWNER, when using RequestDeviceInfoParams to request for eid, the device agrees to display eid. Why can't amapi obtain the eid of the device? It can be confirmed that my device has eid and can display it normally in other modes

Hi everyone, We're setting up Android Auto on fully managed devices through Android Enterprise, but we've run into an issue. When using the voice assistant to make calls, it fails because Google Assistant seems to require signing in with a personal account. Unfortunately, since we block personal Google accounts, our users can't log in, which prevents this functionality from working. Has anyone encountered this issue before? Are there any solutions that don't involve enabling personal Google account login? Thanks in advance for your help!

 Hello, We have observed a significant change in S-Pen behavior following the integration of Google Scribe into Android 15 / 16 on our Galaxy Tab Active 5. Previously, the stylus allowed cursor movement (or select an write area) within text fields without triggering handwriting input. This was essential for our use case. Our technicians are working in proximity to high-voltage electricity and must wear protective gloves. The stylus is their only means of interacting with the tablet during operations. With the recent change, the stylus now immediately writes in text areas instead of moving the cursor, making it impossible to position the cursor without touching the screen with a finger (which is not feasible in our environment). Before with old firmware (Android 14): https://youtube.com/shorts/RXaPRRXaNcs?feature=share After with latest version of Android with Google Scribe (Android 15/16) : https://youtu.be/ZfKKCKcfxUc / https://youtube.com/shorts/EbuibT211lg&n

We have a BYOD deployment where users enroll their personal Android devices and get a work profile. Inside the work profile, we deploy an internal app that handles URLs for one specific corporate domain (e.g. internalapp.company.com). We also deploy Edge as the default browser in the work profile.Desired behavior:Links to internalapp.company.com → open in our app All other links → open in Edge as normalThe problem: We cannot host assetlinks.json publicly on that domain, so standard App Links verification is not an option.What does work (manually): On each device, going to Settings → Apps → [Our App] → Open by default → Add link and checking the domain works perfectly. After that, links from Slack, email, etc. open in our app as expected.But we have hundreds of devices and need this enforced administratively through MDM (Intune/WorkspaceOne).Has anyone found a way to push this domain-to-app association via MDM policy in Work Profile mode? Or any other enterprise-managed approach that av

Hello,I'm Peter, from Hungary.We use in our enterprise mobile fleet the Blackberry UEM management service, and we have a lot of SAmsung device with Android Enterprise fully managed workspace.Several day age, we noticed a problema on our devices with Google Maps and Waze.We colsulted a lot with Blackberry, and figured out the problem maybe in the navigation apps mentioned above.Here is the circumstances:update the Android OS from 14, 15 to Android 16, then update all available application, which is included navigation apps. then a lot if user cannot use navigation anymore, because it cannot run due to Network issue.We checked the hole infrasrtukture, IT policies with UEM technician.We use container-wide VPN (Blackberry own VPN tunnel), but navigation apps routed directly to internet (exepted from VPN tunnel).Here some logs from a devices, which is cant run Waze and Maps:Line 701846: 2026-04-08T13:24:13.508245 - PROBE_HTTP http://connectivitycheck.gstatic.com/generate_204 Probe failed wi

I want to know status for oneplus 13 and 15R for Android enterprise recommended list. Oneplus 13 is mentioned in the list however the device available to region APAC. is not included. Even though device can be purchased in India does this mean it will not work for enterprise application in India. Example intune. Secondly want to know when the oneplus 15R model will be added to the Android enterprise recommended list. Lastly I want to know if work profile and in tune can still work on latest oneplus model even though not in device list for Android enterprise.