Skip to main content
E
Edward
Level 1.5: Cupcake
September 7, 2023
Question

What apps can be kept after enrollment?

  • September 7, 2023
  • 2 replies
  • 0 views

Hi everyone

 

We are using Android Enterprise, and we find out that after enrollment, no matter by scanning the QR code or using ZT, some apps will be removed, even we configured to keep the apps by using this ""android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED":true"

 

So I want to know, why the apps will be removed and what will be remained? Is there a way for me to predict what apps will be remainded? Like some non entertainment app will be kept, while the others are not?

 

Thanks

2 replies

M
Moombas
Level 4.4: KitKat
September 7, 2023

I assume the starting and ending " are just for the post here, so you use (otherwise change it and try again): 
"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED":true

For those apps are missing there must be somthing to re-enable them after enrollment as our MDM provides such a functionality but can't find it currently in the API documentation. (We prefer to set this to keep this on false and enable what we really need).

    E
    EdwardAuthor
    Level 1.5: Cupcake
    September 8, 2023

    Does your term "re-enable them" mean deploy app via google play policy?

    M
    Moombas
    Level 4.4: KitKat
    September 8, 2023

    No, our MDM provides a script which can re-enable them. (System apps are disabled not uninstalled so they just get enabled again and available without the need to provide them via play store again).

     

    enable_system_app

    Allows a system application on the device to be used in the Android Enterprise container.

    Note: Only applications that are included in the device's firmware can be used in this command.
    		enable_system_app appBundleID

    Example

    To add Google Chrome to the Android Enterprise container:

    enable_system_app com.android.chrome

    J
    jasonbayton
    Level: 4.1: Jelly bean
    September 7, 2023

    If your policies are set to Allowlist/whitelist for play instead of black/Blocklist, and your EMM is based on AMAPI, you'll see the apps should be present, but AMAPI will still disable them after enrolment.

     

    If you want it as open as possible, set the app policy for play to block only specified apps. If you want to keep it locked down, find the apps you want to allow on devices and add them as system apps to be enabled. 

      E
      EdwardAuthor
      Level 1.5: Cupcake
      September 8, 2023

      As far as I know, the play mode will only affect the apps in the play store, whitelist mode means only apps deployed by admin can be accessed, while blacklist mode means the user can access to all apps, will it also affect the original system apps as well during enrollment? I though this play store mode only takes effect after enrollment

      Though I can use the policy to deploy apps, but not all these system apps from the device itself are available on play store, I can't find and deploy it, that is what really troubles me

      Terms & ConditionsCookie settingsAccessibility statement