Android Enterprise General Discussions

Hi  I want to know when I activate AE, can Google reply the account used for activating AE to the EMM or MDM, so that in the future, if I want to cancel or deactivate the AE , I can know exactly which Google account I used. Because I have met several times that the client forgets which account was used, so they can't deactivate the account Thanks

How do I target new API level requirement for app I want to publish it?Lint found fatal errors while assembling a release target.Fix the issues identified by lint, or create a baseline to see only new errors.To create a baseline, run `gradlew updateLintBaseline` after adding the following to the module's build.gradle file:```android {lint {baseline = file("lint-baseline.xml")}}```For more details, see https://developer.android.com/studio/write/lint#snapshotC:\Users\lferg\AndroidStudioProjects\simple-web-browser-android\app\build.gradle:11: Error: Google Play requires that apps target API level 33 or higher. [ExpiredTargetSdkVersion]targetSdkVersion 29~~~~~~~~~~~~~~~~~~~Explanation for issues of type "ExpiredTargetSdkVersion":Configuring your app to target a recent API level ensures that usersbenefit from significant security and performance improvements, while stillallowing your app to run on older Android versions (down to theminSdkVersion).To update your targetSdkVersion, follow the

Hi Team, Greetings, Due to Phone number is tagged with left employee and SIM connection is not active now. Hence we would like to know How to reset the 2factor authentication for the respective Managed Google Play Account (Work email address login) where we can receive an email when there is an "Reset link" can be sent by google admins ?. please help on this topic, being its an critical for us. 

my app on android studio has no module

Hi - i am using Galaxy s24 ultra 5g. the problem i am facing is that i have work profile enabled where i am accessing the gmail and google chat of office. But i hvae stopped getting the ringtone when someone is calling me on google chat that is installed in work profile. Please help resolve this issue

Hi,for our markets, we have approximately 550 Honeywell CT30 (Android 11 and 12) devices in use.The devices are registered in Google zero touch and managed by Intune.  We noticed that on a few devices, a pushed app is not being installed.The reason is that the Play Store is missing. Instead, there is an app called "Play Store Recovery Service".When we open the app, it says "Please wait, recovering the Play Store...". No matter how long we wait, nothing is happening. Do you have any idea how we can get the Play Store back?

Got a strange one; i have a Honeywell Ct60, android 10.0, that i have had for years as a test device.  This week i began testing a new app update.  i wiped the device and enrolled it into my MDM, WorkSpace One, i noticed about an hour or so later it automatically wiped.  I thought strange, but must have been a fluke, so i enrolled it again. Same thing re-enrolled it and the next day it was reset.  i went to enroll it today and was actually able to pay attention to it and shortly after enrollment a notification popped up stating it was going to reset within and hour message was from "Device Setup", well i'm thinking i don't have that setup in my config, so i look further and found that it was being managed by another company, Publix Grocery, and i am in a health system in a completely different state.  Any ideas on how my device got added to their EMM?  

I am building a AOSP-project where we have a APK, we would like to be device-owner on the build. Where in the AOSP-project do we set a specific APK as device-owner? Thanks!

I recently joined a new company, they're high on security. It's difficult to work with the company laptop remotely because once it goes to sleep(after about 2 mins of being idle) it disconnects from the internet and you need to log back in, connect to the wifi, connect to a VPN with your credentials, authorize the VPN via your phone and then click accept before you get internet access on the computer again.  In other to reply emails and messages faster, I had to add a work profile, I installed the required apps, accepted polices etc. communications apps that connect to the company domains or work apps have to be funneled via a VPN (required installation by the company). So basically these apps don't work without the vpn. My main concern is that this VPN might be monitoring traffic in my personal profile although I have premium proton VPN installed, I don't feel entirely safe about it. I've checked online and the answers I've seen are generic. Any

Dear Android Community,We are a trust organization and building an enterprise Mobile Application for our employees. As a part of our commitment to strengthening the integrity of our mobile application, we are exploring the possibilities of implementing a binding mechanism with the following device identifiers: IMEIIMSIMAC address.This additional layer of security aims to enhance the trustworthiness of our mobile application, providing a more secure environment for our employees.However, we are facing some challenges in implementing this functionality, especially about the latest Android versions and privacy considerations. I am reaching out to seek your expertise and guidance on the best practices to fetch any of the above-mentioned methods in compliance with the Android security standards. I want to ensure that my application adheres to all the necessary permissions and privacy policies to access this sensitive information.If you have any relevant resources, code examples, o

We have devices provisioned on an Android Enterprise policy where the AdvancedSecurityOverrides.UntrustedAppsPolicy is set to DISALLOW_INSTALL, but users are still able to download APKs via browser and install them.  Is there another setting that someone is aware of that would prevent this behavior? Thanks all.

Hi,I'm trying to configure Gmail via managed configuration (by custom DPC app).I was a little confused by the description of setting "exchange_authentication_type" from the documentation. The text looks like it should be a string with a value from the list.https://support.google.com/work/android/answer/7065453?hl=en&ref_topic=6174026However, according to the gmail configuration file, the application must pass an array of strings<restriction android:key="exchange_authentication_type"  android:restrictionType="multi-select" /> Can you help me on a couple of questions:1) Has this behavior been there since the setting was introduced, or has it changed over time?2) What happens if you pass all possible values into an array? I also noticed that if you pass null, then Gmail does not want to authorize the user using the certificate in the work profile, is this expected behavior?

Hi Team,Upon reviewing the Maven Repository, we have observed that the latest version of Apache HttpCore (4.4.16) is flagged as vulnerable and EOL due to dependencies (https://mvnrepository.com/artifact/org.apache.httpcomponents/httpcore/4.4.16), and the artifact has been relocated to org.apache.httpcomponents.core5 » httpcore5. Similarly, Apache HttpClient (version - 4.5.14 >> 5.4.x) has undergone a similar transition.Apache HttpClient serves as both a direct and indirect dependency for below mentioned jars, that we (MDM) use for  Android Enterprise Management. However, we have identified that several jars listed below continue to utilize the older version of Apache HttpClient (4.5.14), which is marked as vulnerable and EOL, despite the availability of the latest version (5.4.x). This persistence poses a significant security risk for us and our customers using Android Enterprise via our product.Could you please provide guidance on how best to address this issue?Ar

Hello,We are experiencing a new issue with our Android device enrolments where the MDM app is not being installed during the sign-in process. App is configured in Android Management between our CyberArk tenant and Google domain, and user accounts are configured to do set-up for device owner enrolment.  Previous device enrolments are still working as expected, and we first noticed this issue on 13-11-2023. No changes have been made to either the CyberArk configuration/device policy or to Google Admin.  This issue is affecting all new Android device enrolments, even across Android versions (Android 10-14 affected).  Would you please able to assist to fix this issue?  Error Log:11-24 14:35:49.411 3842 4105 I Auth : (REDACTED) [BroadcastManager] [BroadcastManager] Broadcasting bad device management=%s11-24 14:35:49.414 3842 4105 I Auth : [AccountStatusChecker] Error when fetching package info [CONTEXT service_id=343 ]11-24 14:35:49.414 3842 4105 I Au

Hi Team, I work with a MDM solution which is currently device admin, I want to enroll the devics using Samsung KME. I integrated it and able to enroll the devices till Android 11. but the versions above Android 12 are not getting enrolled. When I asked the Samsung team, they said that KME enrollment uses Android Enterprise Device Owner type. They said I have to move to device Owner using Android Enterprise. How do I achieve this. We have our own dashboard from where we push all the policies now. I also saw that AE is no longer taking any new registrations.  Please help with this.

As a New Zealand based reseller, can I enroll the devices to Australia tenant? 

Hello, Does anyone know if there is a way of not publishing everything that is ready to be published from an app review point of view? I have a closed testing track app ready to be published and I will shortly have a production version of the app ready for review. But as far as I can see you can't only publish certain tracks i.e. the production and not the closed track. You can only publish everything that is ready to be published? What I wanted to know was if, for example, I wanted the production version to go live now and wait before releasing the testing track? Cheers

We as a organization having developer account and enabled the partner to publish the app on behalf us. We need to convert the same account into Enterprise account and generate the Organization ID (or) We are open to craete a new account which can act as managed google play account. Please suggest how it can be donen and steps to be followed. Presently when i'm trying to click on admin settings from the managed google play console i'm getting the below error. We don't have any admin accounts craeted before or linked to the developer account.

Hello everyone,I'd like to confirm whether Android imposes the restriction that a VPN running in the work profile can only handle traffic originating from within the work profile. Does this mean that traffic from the personal profile remains separate and is not routed through the VPN in the work profile?Thank you.

I have a galaxy S21 FE that was just updated to android 14 and One UI 6, and that seems to have removed all admin apps (except device policy and Knox Enrollment services). the device can no longer be controlled by Intune and all the policy's were removed (luckily this means I can still factory reset it). it also uninstalled all apps that were installed by Intune, and the work google account was removed so when the play store was opened it was prompting for a sign in. Another concerning thing is it seems that the device password was removed. Has anyone seen something like this with Android 14 and Intune? I also called Samsung, and first was sent to consumer support, and was told that they have had allot of issues with Android 14, and then got sent to B2B Support and was told its an Intune issue, and they had no reports of problems. I have some other devices that were updated to Android 14, and no reports from those users with problems, so its possible its just a fluke, but still mildly

Hi guys, can anyone tell me what happens to a fully set up Android device when this device is added afterwards to Zero Touch and gets its config? Does nothing happen until the next hard reset or is it possible that it does an reset by 'itself'? Thank you.

Hi everyone, can I apply Android Enterprise policies to a device that's offline? My devices aren't always connected to the internet, so I need to manage policies after certain events happen, even without a connection. Thanks!

Good morning,  I'm opening this post because I would like to know more about SIM management on WPCOD devices in Android 14.According to Jason Bayton (https://bayton.org/blog/2023/04/android-enterprise-in-android-14/) and feedback I received from Samsung support, this feature expected to be implemented in Android Enterprise for Android 14 release.  I have several customers who have contacted me regarding the management of calls and SMS in order to assign a SIM card to a profile (Professional or Personal) and receive calls and SMS only on the assigned profile.  I have an Android 14 device (Samsung Galaxy A53), which I enrolled on Knox Manage in WPCOD, I looked on the Android Enterprise policy to check if there was a setting to perhaps activate the configuration of SIM management or see assigning the location of a SIM to a profile on a dual SIM device but I found nothing.  I added two SIM cards to my device but I don't get a pop-up asking me to assign a SIM card to the

We have multiple Playstore developer accounts in our company, most of them are only running managed google play and permanently private apps.All the teams have to go through the new Account verification according to the new Play Store policy.We probably need to involve legal department or similar for official documents and ID for each of these accounts.Is there a way we could do this in one go for all of our accounts?

Hello Android Enterprise Team, We are experiencing a new issue with our Android device enrolments where the third-party MDM app(CyberArk MDM App) is not being installed during the sign-in process. App is configured in Android Management between our CyberArk tenant and Google domain, and user accounts are configured to do set-up for device owner enrolment. Previous device enrolments are still working as expected, and we first noticed this issue on 13-11-2023. No changes have been made to either the CyberArk configuration/device policy or to Google Admin.  This issue is affecting all new Android device enrolments, even across Android versions (Android 10-14 affected).  Could you please help to fix this issue?Thanks in advance Error Log:11-24 14:35:49.411 3842 4105 I Auth : (REDACTED) [BroadcastManager] [BroadcastManager] Broadcasting bad device management=%s11-24 14:35:49.414 3842 4105 I Auth : [AccountStatusChecker] Error when fetching package inf