Android Enterprise General Discussions

Is it possible to share photos /files from Google Photos to Outlook on kiosk mode ?  looks like from outlook we can attach the files but not from Google photos ?   Regards,Srikanth

I tried to check through all settings around notifications but to no avail.When I open the Outlook app, I can see new emails load up (so not that Outlook app is not able to get the new data), but its just not sending notifications as we normally get.Could it be something on the backend / IT Admin related or some hidden setting I haven't explored?

Hi,I am using an Android 12 device, company-owned and is fully managed. My enterprise is configured to receive "USAGE_LOGS" notifications and I enrolled the device with token parameter "allowPersonalUsage" set to "PERSONAL_USAGE_DISALLOWED". Also I enforced location mode with a policy. I can see the notification that command went through and device enters alert state as expected. Then, I move device in lost state by clicking "I found this device" and expecting location logs to appear. Nonetheless, no usage logs are coming from my push pubsub. Before I was using pull pubsub and actually was able to receive usage logs back then. Don't really know if it's related. Originally, I though that the problem is that I couldn't properly subscribe enterprise to receive USAGE LOGS but it seems that's not the case from my previous question. My previous question on Usage logs 

@jasonbayton  we are currently assigning devices in zero touch console by serial. They have a particular configuration tied to them using DPC extras so that when the device is turned on and connected to a network, it begins the work managed enrollment process which has worked for 8 months and still does  I just received a zebra tc22 and trying to enroll the device using the same mechanisms but isnt working. The device goes to the home screen instead of the work managed screens to tie it to the workspace one console  trying to see if this is related to a delta in dpc extras for A13 but striking out.

Android does not allow any push notifications during the OOBE (out of box experience) setup process.    This presents challenges during Intune enrollment because we require users to satisfy MFA (SMS or MS Authenticator) in order to complete Entra AD device registration and device enrollment. The inability to receive push notifications on the new Android they are configuring requires users to configure their MFA on a secondary device before starting the setup of the new device, or obtain a temporary access pass from our Security Team. If OOBE supported push notifications it would resolve this and provide a much simpler and easier enrollment/user experience. 

A bit of background to use 1st, we have only ever used the Device Administrator to manage our company owned phones and use an Intune licence.I want to start using Android Enterprise but I've not as yet had any training so this is all new to me.Ideally, we want to use Fully Controlled Devices for our Company owned devices and Work Profiles for those users using their own device. Which I am sure is quite common practice.So I have had a play and not yet got anywhere with Fully Controlled Devices but have got Work Profiles setup and working to an extent. However, one stumbling block is that the Google apps, Docs, sheets, Drive etc. show no data from the user’s account. Apps like MS Outlook work just fine.Could someone be kind enough to point me in the right direction on this?Also, what training sources would people recommend? We are a State Education environment, so have a very limited budget as per usual. Thank you

Hi Community, I have an issue and a doubt at the same time, I have always used the work profile in my Android to keep things separated between work and personal life, I recently moved into a new company which are not currently using devices policies and I wasnt able to set up my Work profile, so I created my work profile by using the Android example/test policy to enable the work profile, all was good until I tried to update one of my personal apps via APK, which I got an error saying I have such acction blocked by my IT Administrator, so not only the policy does not limit itself to the Work Profile but also google's example policy blocks apk installation. Is there any way to overcome this issue? I feel Im also being "blocked" for some other stuff since I started digging around.Thanks!

We created an application which was hosted on the work profile, unfortunately we are unable to make the application visible on the homepage. What would be the reason?

We are using fido2 keys for login for our shared windows computers and want to do the same for our shared Android devices but its just sad to see the missing support from Google, is there a philosophical reason it is not supported or it is just not developed? Native app and browser support of FIDO2 passwordless authentication - Microsoft Entra ID | Microsoft Learn More context:MDM: IntuneEntra ID Shared device Mode

We have 5000 devices getting the message that the google account has been removed from them, and play store apps are no longer installing / available.I try and sign in and check our token (workspace one says its all good) but our account is no longer administrative and cant login? Workspace one says everything is fine. How do we get into admin.google.com with our EMM account? Right its looking like we need to just rebuild the whole environment and re-do thousands of devices.  

How do I set-up and enroll my device and where do I get a code from to create and set-up a work profile Thank you Kindly 

Currently, I am trying to implement lost mode notifications with push pubsub and I need to subscribe enterprise to receive usage logs. When I try to use the following json to patch my enterprise (a chunk related to usage logs):"enabledNotificationTypes": ["ENROLLMENT","STATUS_REPORT","USAGE_LOGS","COMMAND"]I receive only "ENROLLMENT", "STATUS_REPORT" and "COMMAND" in response json. And as expected no location event logs are being pushed from the pubsub. Do I need extra configuration to use USAGE_LOGS or something?Response example json: {        "name": "enterprises/enterpriseName",        "enabledNotificationTypes": [                  "ENROLLMENT",                  "STATUS_REPORT",                  "COMMAND"        ],       "pubsubTopic": "projects/projectId/topics

A bit of background on this, we're currently moving to use COPE Enrolment for all of our devices after using BYOD Enrolment for devices purchased by our org. Utilising BYOD we had issues with users signing into their gmail accounts and leaving the business and we were locked out of the device by Factory Reset Protection (We've used Knox Mobile Enrolment to solve this). This all made sense as it was a BYOD device and for consumers etc it makes a lot of sense. The problem we've encountered is even with COPE enroled devices, if a user doesn't remove their gmail account from the personal profile before resetting the device when the device is used again you're unable to use a Captive Portal network for setup again and this error message is received - "Unable to sign in to Wi-Fi AP. An unauthorised factory reset has been performed on this device. the sign-in screen cannot be accessed."  Even after enrolling the device using a WPA2/3 Network and signing in with the google

We are struggling with some user reports about blocked USB file transfer functionality on their Samsung A52 / A54 devices enrolled with corporate-owned work profile.   Microsoft released a blog post about this issue here. Known Issue: Some management settings become permanent on Android 14 - Microsoft Community Hub   We stumbled across the one-time hint about "do not upgrade non-Samsung devices to Android 14" in the advisory. Did not find any other information whether Samsung is also affected or not, but as we only have Samsung as corporate devices this seems also to apply to Samsung devices. After factory resetting the device and a fresh enrollment the USB file transfer is working as expected / configured!     *15th March: please note: this post has been moved and been made into a new topic and new title

We are a game app development company and we use both company-owned and personally owned devices (BYOD) to test our apps.We have been managing BYOD as Android device administrator, but recently migrated to Android Enterprise. The Android Enterprise BYOD work profile does not allow app installation from anything other than managed google play, so we are unable to install apps from Firebase App Distribution or Microsoft App Center, which we have been using to test apps. We tried uploading the app to Managed Google Play, but it was not sufficient for testing, as had to update the version code after each upload, and past versions could not be installed, and it took longer (than before) for the updates to take effect (Also, the app must be uploaded as a production version and cannot be used for internal test). What we would like to know is how to test the app in the Android Enterprise BYOD work profile (as we have done in the past); it would be great if we could install the a

I'm developing a EMM solution to my company using Android Management API. We wanted to prevent factory reset on the company owned devices. So we configured factoryResetDisabled  as true  also configured enterprise account email in "frpAdminEmails" in device policy .  Factory reset protection is disabled in Settings, also when doing factory reset from boot options (Volume up/down + Power button -> Wipe/Factory reset)  asking for owner email which is configured frpAdminEmails, after successfully verified the email, mobile got freshly started as new mobile. the policy is not re-sync  again. So the device removed from the EMM control. I found this article  https://developers.google.com/android/work/play/emm-api/prov-devices#google_account_method. From my understanding, It says the DPC app automatically got download from Playstore after verifying the google credentials. So the downloaded DPC will handle re-sync the policy into t

I am hosting a company app on the Play store, and have it restricted to be accessible to only members of the organization. I have uploaded a version of my app to the internal testing track, and added my company email to the list of testers. However, I cannot access the internal testing track because my company email is not a part of the organization. Is there a way for me to add the email address to be able to access this version of my app?

Hi my account at https://support.google.com/profile/256792888?sjid=93304737074392578-APLuke Ferguson 3030is disabled can you un disable it.

please someone help me 

can Google block all of developers products on an account

Please unblock me by IT admin and I want to used my phone normally. 

I am following up on an article I read by @jasonbayton  that was about using adb to force install apps that would otherwise be incompatible. In the article you mentioned that there were no other ways to bypass SDK restrictions, but would it not be possible to change values in the app manifest to accomplish the same thing? Thanks for your time and information! https://bayton.org/android/android-14-minimum-sdk/#is-it-possible-to-test-the-changes 

I use Microsoft Intune to manage Android devices. I removed the Google Play account from the tenant after going into the account and deleting all of the Android devices, and then removing the tenant from the Admin portion of the Google Play account. All good. So I have a clean slate, and in Intune I connected the new account. There was no confirmation or anything. But the account is not showing in Intune. It's been about 1.5 hours. If I try to connect it, it says "This enterprise is already enrolled with another EMM." Since it's not with the old account any longer, I'm assuming it IS connected to my new account. How long does it generally take before I see in Intune that the account is connected?