Android Enterprise General Discussions

I am unable to create my work profile on Microsoft In tune. I have recently purchased OPPO A6 Pro

Hello,we built our Managed Google Play connector in Intune like three years ago with our company name as organization name.Meanwhile our company name as slightly changed and since the company name is shown on all corporate-owned android devices lock screen, we have a high interest in changing that to the correct name.Unfortunately I can not find any way to change that company name. I can only delete that organization. I do not find a way to contact Google directly for that issue, so that is why I ended up here. So here are the questions:What exactly happens to our devices, if we disconnect and delete the organization and reconnect to a new organization with correct name? All devices will reset? All apps will be gone?Are there other ways to configure what is shown on the lockscreen? Maybe it is possible to disable the display of the company name on the lockscreen completely?Or is there a way to contact Google to change that name for us? Any help appreciated. 😎&nbs

I have enrolled a device and want to use managed wifi on that device. I have used following configuration- "openNetworkConfiguration": {    "Type": "UnencryptedConfiguration",    "NetworkConfigurations": [      {        "GUID": "inovex_wifi",        "Name": "INovex-Dev",        "Type": "WiFi",        "WiFi": {          "SSID": "INovex-Dev",          "Security": "WPA-EAP",          "EAP": {            "Outer": "EAP-TLS",            "Identity": "faruk",            "DomainSuffixMatch": ["dms.mobi-manager.com"],            "ServerCARefs": ["ca_inovex"],            "ClientCertType": "Ref",            "ClientCertRef": "clie

Hey! We are currently testing a few apps in Work Profile, for which we need 2FA. The second factor is a FIDO2 token that can be used via NFC or USB. If you have a FIDO2 token with USB-C, everything is fine. But we also have some with USB-A. If you don't have an adapter, you're more likely to resort to NFC. Chrome supports FIDO2/NFC directly, which makes logging in quite easy. However, most web views cannot do this, and a passcode must be entered manually. The pure FIDO2 NFC tag basically contains a URL with the passcode. You open the webpage via NFC, copy the passcode, and enter it when logging in. So far, so good. However, we encountered a problem that prevents us from using the FIDO2 token via NFC in the Work Profile properly. There are default apps for different categories such as browser, wallet, caller ID, etc. If you need to launch one of the app categories and there are several apps available, you will be asked which app you want to use and just for once or always

Hello, since Android 15 we have encountered a huge problem with Corporate phones (enrolled in BYOD) for which users leave the company without deleting their account. We therefore found ourselves with locked phones that we cannot return to our reseller (who asks us for a large sum to unlock them) so I come to you to find a solution or a tool available to the technical teams to clean up. We are open to any advice or help

Hi All, My Intune environment is connected with an old-school gmail.com account - i access the managed store page by going to https://play.google.com/work to approved apps / etc. - This was an old solution that saw little to no use. We're now looking at requiring Intune enrollment on our android devices and it'll get a ton of use once we do that. I'd like to upgrade my account to an Android Enterprise account, but it looks like to do that I'll need to disconnect the Managed Google Play account from Intune. My understanding is that I will need to un-enroll all my android devices from the tenant before doing that.For personally owned devices with work profiles, that's not a problem - we only have 3 PoC users that I can unenroll. The only other two enrollment options we use are Device Administrator (For Yealink teams phones...) and AOSP (For.. newer.. Yealink teams phones).Will disconnecting Managed Google Play affect the enrollment of Device Administrator or AOSP?&nbs

I have implemented this following feature - 3.6. Managed configuration management. Everything understand but got stuck in point -3.6.3. The EMM's console must allow IT admins to set wildcards (such as $username$ or %emailAddress%) so that a single configuration for an app such as Gmail can be applied to multiple users. Not understand how to implement this wildcards in one policy for different devices and also let me know for gmail it is supported or not?Thanks in advance.

According to the documentation of the new portal, admins or owners of the portal have the ability to add devices. However, when as a customer of the portal and owner of it, the devices I try to add are not added. I am always forced to go through the reseller. Would it be possible to delegate the addition of devices to the customer?

Hi everyone, We’re facing an issue with devices running Android 15 — after successfully enrolling them in our Android Enterprise setup (Device Owner / Fully Managed mode), the Google Services Framework (GSF) ID is not being generated. This issue did not occur on Android 13 or 14; the GSF ID was available immediately after enrollment. However, on Android 15, the GSF ID remains empty even after waiting and rebooting. We’ve already tried: Factory reset and re-enrollmentChecking Google Play Services versionEnsuring the device is connected to the internetWaiting for Play Store sync Despite that, the GSF ID is still missing. Could anyone confirm if there’s a known change in Android 15 related to GSF ID generation, or if additional permissions/configuration are required for enterprise-enrolled devices to obtain it? Any guidance or workaround would be greatly appreciated.

I'm developing a BYOD workplace profile, and one of the required features in the functional specification is as follows:"2.7.2. Debugging features must be blocked. This subfeature is supported by default."I'm trying to implement this feature, and in the REST Resource: enterprises.policies - AdvancedSecurityOverrides - DeveloperSettings, I'm configuring either DEVELOPER_SETTINGS_DISABLED or DEVELOPER_SETTINGS_ALLOWED. However, it seems that either option doesn't restrict the developer options on the device. I'm curious about the role of these options, whether they are functioning correctly, or if this feature is not implementable in a BYOD context.Sorry if I wrote this through a translator so the context may be incorrect.

We use a custom DPC to create work profiles. On certain devices, profile creation fails with errors like STORAGE_UNAVAILABLE or work profile already exists. From bug reports, we can confirm the failure cause, but is there a way to detect these conditions directly in our app and handle them gracefully?”

Hi all, I could use some help or guidance from someone who has experience with using Okta as IDP and Intune as MDM.  The problem:When going trough enrollment (COPE), the Intune login page shows up. When entering the email, it forwards to Okta as it should. But after verifying with Okta, you should get back to a Microsoft confirmation but instead it shows a page not found error.  It used to work, nothing has changed as far as we know and the issue is present on devices ranging from Android 13 to 15, different brands but mostly Samsung.  Apple and Windows enrollment work as expected, no issues there.  I can't find any related logging details in Intune and lack the knowledge of Okta (will add a support ticket there as well). So i'm kind of lost as to what is happening.  Where do I need to look for the return URL for example? There are multiple Azure enterprise apps but i'm not sure which one to check and don't want to mess to much wit

Our Provider (Vodafone Germany) is using a SMS shortcode number to be able to order an upgrade on dataplans by sms. Once the monthly contract plan (e.g. 1 GB) have been used users will receive a sms from 70997 to inform that you can answer the SMS with "1" or "2" to restore your data connectivity. We ran into the issue that the Google Messages app seems to have some sort of bug with sending SMS to this kind of shortcode number as it alway says "Not sent" in red error text. Provider tech support told me that the Google messages app is prefixing the number with "49" resulting in a wrong / unknown number (4970997). They cannot fix that from their side as the issue is within Google messages app and asked me to install a 3rd party messages app.... *ugly* Is this something I can request to investigate from here? I will also create a case with Samsung tech support as we are mainly using Samsung devices as our corp. device fleet.  Thank you! Kind RegardsDaniel

Hello, A client would like to define Adobe Reader as default pdf viewer on WPCOD devices or DO devices. I didn't find any informations about it in android enterprise documentation or Ivanti NMDM documentation. Is it even doable ?Has anyone ever had a similar request? Thank you,  

Hi everyone, I noticed that it is now possible to delete an application that has been unpublished for a long time, for example.When you click on delete application, you are asked for the transaction ID of the developer account and the package name.I have my transaction ID (which can be found on payments.google.com), but it is not in the same format as the examples givenand is not recognised. Have you ever tried to delete an application? Have you also encountered a problem with this ID? Best regards,NB : The ID I have is in the format xxx.registration-xxx-xxx-xxx-xxx-xxx 

Hey @Community,we have a strange issue with out MDM (Intune) - It seems like, the link between Intune and Google has broken.Trying to enroll new devices are failing with "Invalid code". Trying to add new applications via "Managed Google Play" fails also with the message "Tenant has been unbound from Google Play console". Intune-Support says, that we need to contact Google, but there is no option for creating a case. So we decided to write you here (and hopefully you can help us ;) ). We still have the access to the used Google-Account. 

Hi Team,We are facing an issue with the default configuration profile in the Android Zero-Touch (AZT) portal. We have set up a custom configuration profile as the default, but whenever our reseller adds a device in the AZT portal, the devices are getting assigned to the Enterprise Default Configuration Profile instead of our configured default profile.At the moment, we are manually assigning the correct profiles in AZT, but this is creating additional effort and delays for our IT team and end users. We are unsure where this enterprise default profile is coming from and why it is overriding our custom default profile.Could you please help us resolve this issue or provide guidance on why the enterprise default profile is taking precedence?Also, do you have any recommendations other than unlinking the AZT portal from the Workspace ONE portal?Thanks in advance for your support. 

Does anyone know if it's possible to allow an android tablet to connect to captive portals whilst in Kiosk mode.I am currently trying to configure Intunes to allow this and cannot find a way to allow the tablet user to connect to a Captive portal as this is being restricted. Upon the device being configured and connecting to Wi-Fi it does not display the Wi-Fi landing page to allow access.Has anyone come across this issue whilst using Intunes\Kiosk mode specifically with Android devices? Thanks

can i get zero touch for my anti theft  application  can help me get and start my bussines in india

Hi everyone,I run an e-commerce website specializing in Western wear in Pakistan and I want to add a “miles” or loyalty-points system in my Android app. The goal is to reward customers for purchases, encourage repeat orders, and increase customer retention.Here are some of the features I’m considering:Customers earn a certain number of miles / points per purchase, depending on cart value.Miles can be redeemed for discounts or free items.Displaying miles balance in the user’s profile.Ensuring security / preventing fraud (e.g. fake orders just to collect miles).Possibly integrating the miles system across website + Android app.My questions are:What Android- or backend-side frameworks / libraries can help me build or integrate a loyalty-points system?How do others handle storing and syncing points (offline vs online)?What are good patterns to avoid abuse / fraud in such loyalty systems?Any advice for making the UI/UX for loyalty points (especially for customers in Pakistan) intuitive and

Hello! I'm looking for information regarding the network specifications for the Zero Touch Enrollment as well as any phone-home network requests. Are there any logs we can pull from ZTE or the Android device during enrollment? The reason I'm asking: We have thousands of devices that have been enrolled in SOTI MobiControl over the last few years, and about 1000 of these were enrolled via ZTE. We've had no issues with this until early March. I can't find a rhyme or reason for this, but certain devices that were successfully enrolled, configured by an MDM, QC'd, boxed up, shipped to the end user, and then powered on will get the message below before the eSIM is activated. These are Honeywell CT47 devices with dual SIM cards (1 physical Nano SIM and 1 eSIM). The device above was added to ZTE using the IMEI number over a month ago and was successfully enrolled, but when powered on later and connected to Wi-Fi, it reset itself before the eSIM could be activated. This

Hello,I hope you're doing well. I'm reaching out for assistance on an issue I'm experiencing with DPC extras on ZTE devices.Is there a method to implement DPC extras without using a QR code? It appears that even when configuring ZTE with DPC extras, some functionalities do not activate. Additionally, several design elements seem less than optimal.For instance, if you do not use a QR code before selecting the language—which, ideally, should be sourced from the DPC—there's an option presented to transfer data from another device. This option seems inappropriate for a company-owned device. Could this be improved?The next screen prompts a WiFi connection. Using a QR code skips this step, but users still need to manually confirm the WiFi connection. Could this be streamlined?Is it possible to enroll a device as an admin, reset it, and have the DPC extras from the QR code persist on the device until it connects to WiFi and verifies its management status?It seems everyone is adding devices to

We noticed a strange behaviour, If G-board has additional languages added apart from English like Polish or German, post enrolling into a work profile, the additional languages disappear from the keyboard. I was able to reproduce with Intune, WorkspaceOne and even TestDPC app. This is true even if no Device Restrictions are applied. It seems like a bug. Has anyone else seen this issue?  

Hello community, I'm writing this post 'cause I'm facing a strange issue with the lock screen setting on our AE devices managed from Intune.The configuration policy was created by my predecessor years ago, and was configured for lock teh screen after one minute. Everything working and all happy.Then I got the request for create an exception group for that, and everything I tried failed.I tried to change the global policy to 5 mins, but it did not worked, and the maximum lock screen time is still one minute.Also remove the setting at all and left it Not Configured didn't had any effect. Then I tried to disable One Lock. With this I was able to change the system lock screen settings but on Settings - Security and Privacy - More Security Settings - Work Profile Security - Use one lock I cannot set anything longer than one minute. Pretty sure this is coming from somewhere in Intune, but also involving Microsoft and sending them the verbose logs wasn't enough.Did any of you ever e

The Device art generator is a great tool for people who don’t want to install Android Studio just to take some framed screenshots for documentation use. There are third-party apps that can do this too (Snapmod), but I was wondering if the developers at Google could give the Device art generator some well-deserved love and update it to include Pixel 10 frames? Thanks. (Google) Device art generator: https://developer.android.com/distribute/marketing-tools/device-art-generator 3rd party option: https://play.google.com/store/apps/details?id=cn.gavinliu.snapmod